last executing test programs:

9m24.481944343s ago: executing program 2 (id=400):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000013f9f89128c3e9200965c56f88026807f6de038bde934a430f8939f7e9344a3f"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_read_part_table(0x61f, &(0x7f0000000cc0)="$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")
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r4=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00')
symlink(&(0x7f0000001500)='./file1\x00', &(0x7f00000014c0)='./file0\x00')
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008190000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
rename(&(0x7f00000000c0)='./file0/file0/..\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7, 0x0, 0x6a}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000380)=ANY=[@ANYBLOB="21e0000001"])

9m23.922754902s ago: executing program 2 (id=414):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
dup3(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x401}, 0x18)
move_mount(r2, &(0x7f0000000100)='./bus\x00', r3, &(0x7f00000000c0)='./bus\x00', 0x14)
sendfile(r3, r2, 0x0, 0x7ffff000)

9m23.691950215s ago: executing program 2 (id=419):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x800, 0x3, 0x1}, 0x20)

9m23.621129866s ago: executing program 2 (id=420):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x40}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noinit_itable}, {@errors_remount}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000d80)="$eJzs28tvG0UYAPBv7aQlfZBQlUcfQKAgKh5Jk5bSAxcQSBxAQoJDOYYkrULdBjVBolVEA0LliCpxRxyR+As4wQXBmSvcUaUK5dLCadHau4lt7DRJ7Tjg30/admZ3rPk+7449uxMH0LdGs3+SiH0R8VtEDNeqjQ1Ga//dWVma/mtlaTqJNH3nz6Ta7vbK0nTRtHjd3qIyEFH6PIkjLfpduHL1wlSlMns5r48vXvxwfOHK1RfmLk6dnz0/e2nyzJlTJydeOj35YkfyzPK6ffiT+aOH3njvxlvTZ2+8/8t3SZF/Ux4dMrrewafTtMPd9db+unIy0MNA2JRybZjGYHX8D0c51k7ecLz+WU+DA7oqTdP0ofaHl1PgfyyJXkcA9EbxRZ/d/xbbNk09doRbr9RugLK87+Rb7chAlPI2g033t500GhFnl//+OtuiO88hAAAa/JDNf55vNf8rRf1zofvzNZSRiHggIg5ExOmIOBgRD0ZU2z4cEY9ssv/mRZJ/z39KN7eU2AZl87+X87WtxvlfMfuLkXJe21/NfzA5N1eZPZG/J8djcHdWn1injx9f+/XLdsfq53/ZlvVfzAXzOG4O7G58zczU4tS95Fzv1qcRhwda5Z+srgQkEXEoIg5vsY+5Z7892u7Y3fNfRwfWmdJvIp6pnf/laMq/kKy/Pjl+X1RmT4wXV0W94hq6/na7/u8p/w7Izv+eltf/av4jSf167cLm+7j++xdt72m2ev3vSt5t2Pfx1OLi5YmIXcmbtaDr9082tZtca5/lf/xY6/F/INbeiSMRkV3Ej0bEYxHxeB77ExHxZEQcWyf/n1996oOt599dWf4zmzr/a4Vd0byndaF84afvGzod2Uz+2fk/VS0dz/ds5PNvI3Ft7WoGAACA/55SROyLpDS2Wi6VxsZqf8N/MPaUKvMLi8+dm//o0kztNwIjMVgqnnQN1z0Pnchv64v6ZFP9ZP7c+KvyULU+Nj1fmel18tDn9rYZ/5k/yr2ODug6v9eC/mX8Q/8y/qF/Gf/Qv1qM/6FexAFsv1bf/9d6EAew/ZrGv2U/6CPu/6F/Gf/Qv4x/6EsLQ3H3H8nvsEKyM8Lo80KUdkQYXS2kaXptB4TRXBiKiK731etPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74JwAA//8pIeT8")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, r3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="1ebf5c7e439cc280"], 0x20}, 0x1, 0x0, 0x0, 0x4891}, 0x48006)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000000)='s', 0x1, 0x850, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2a0471a, &(0x7f0000000540)={[{@quota}, {@dioread_lock}, {@nouid32}, {@nogrpid}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x47c, &(0x7f0000001740)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f000001fa00)={0x8, 0x5, 0x0, 0x0, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x4)

9m23.3457766s ago: executing program 2 (id=425):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000007ccfb6fb", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x18)
close(r2)

9m22.507602534s ago: executing program 2 (id=439):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x800, 0x3, 0x1}, 0x20)

9m22.501620583s ago: executing program 32 (id=439):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000000, 0x800, 0x3, 0x1}, 0x20)

9m13.240112947s ago: executing program 0 (id=574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xcb83, 0x0, 0x2, 0x288}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000040)={0x9c64, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}})
io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x3d)

9m13.202596457s ago: executing program 0 (id=575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x20002, 0x55, 0x15}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x65cfa})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

9m13.127461458s ago: executing program 0 (id=577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r2)

9m13.00276385s ago: executing program 0 (id=578):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
ftruncate(r0, 0x2007ffc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10)
io_setup(0x3, &(0x7f0000000340))
sendfile(r0, r0, 0x0, 0x800000009)

9m11.896972967s ago: executing program 0 (id=583):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x8, 0x80000000)
recvmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000280)=@in, 0x80, &(0x7f0000000300)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b7000000080000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_sync_fs\x00', r1}, 0xfc92)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x10d002, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5f613b5c6f04cf4f, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2, 0x7, 0x4, 0x2}]})

9m11.563886223s ago: executing program 0 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

9m11.555368283s ago: executing program 33 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

8m2.917819044s ago: executing program 3 (id=1658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'virt_wifi0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001815002c1bbe4c8525eb8df20e29948b8e872f767741064dedd75a8190852bff4b381f19cc71b311b7699d8d37d03a85616351f79ab1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000006c0)=@known='com.apple.FinderInfo\x00')
socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000400)=0x12, 0x4)
getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, &(0x7f0000000480))
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000101010200000000000000002aedff000c00198008000280"], 0x24}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x10)

8m2.820307735s ago: executing program 3 (id=1661):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x45, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0)

8m2.819559425s ago: executing program 3 (id=1662):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
dup3(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x401}, 0x18)
move_mount(r2, &(0x7f0000000100)='./bus\x00', r3, &(0x7f00000000c0)='./bus\x00', 0x14)
sendfile(r3, r2, 0x0, 0x7ffff000)

8m2.383525482s ago: executing program 3 (id=1674):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x40}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noinit_itable}, {@errors_remount}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, r3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="1ebf5c7e439cc280"], 0x20}, 0x1, 0x0, 0x0, 0x4891}, 0x48006)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000000)='s', 0x1, 0x850, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2a0471a, &(0x7f0000000540)={[{@quota}, {@dioread_lock}, {@nouid32}, {@nogrpid}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x47c, &(0x7f0000001740)="$eJzs3M9vFFUcAPDvzHZB+dWK+ANErRJj44+WFlQOXjSaeMBoogfUU20LIRRqaE2EEKnG4MXEkOhZPZr4F3jzYtSTiYknvRsSolxATzUzOwPd7W67paVbup9PMu17+97svLdv3uyb93Y3gK7Vn/1JIrZFxB8R0VuL1mfor/27duXc2L9Xzo0lMTf3xt9Jnu/qlXNjZdZyv61FZCCNSD9JioPUmz5z9sTo5OTE6SI+NHPyvaHpM2efPn5y9NjEsYlTI4cOHTww/NyzI8+0VY9kifSsXlf3fDi1d/crb118dezIxXd//i7bZ1uRPr8eN2XTwof6s4r/M5drTHss7lzR4dab7fPCSU8HC8KyVCIia65q3v97oxI3Gq83Xv64o4UDbqnsvWlz6+TZOWADS6LTJQA6o3yjz+5/y22Nhh7rwuUXajdAWb2vFVstpSfSIk+14f52NfVHxJHZ/77KtliNeQgAgCV8Nvbl4Xiq2fgvjXvn5dtRrKH0RcRdEbEzIu6OiF0RcU9Enve+iLh/mcdvXBpaOP5JL91UxdqUjf+eL9a26sd/5egv+ipFbHte/2py9PjkxP7iNRmI6uYsPrzIMX546bfPW6XNH/9lW3b8cixYlONST8ME3fjozGg+KF0Flz+K2NPTrP7J9ZWAJCJ2R8Se5T31jjJw/Ilv97bKtHT9F7EK60xz30Q8Xmv/2WiofylZfH1y6I6YnNg/VJ4VC/3y64XXWx1/RfVfBVn7b6k//4uUr88Ugb535q/XTseyVy4v/Plpy3uamz3/NyVv5tejctn1g9GZmdPDEZuSw3m87vGRG/uW8TJ/Vv+Bfc37/85in6z9H4iI7CR+MCIeioiHi7I/EhGPRsS+Rer/04ut09ZD+483vf5dP//7krr2X36gcuLH71sdv732P5iHBopH8uvfEtot4EpeOwAAALhdpPln4JN08Ho4TQcHa5/h3xVb0smp6Zknj069f2q89ln5vqim5UxXbzEfWo2I4WS2eMba/OhIMVdczpceKOaNv6hEHh8cm5oc73DdodttbdH/M39VOl064JZrto420uQLbcDG09j/0/ro+dfWsjDAmvJ9beheS/T/dK3KAay9hf1/qZ/TATaKZu//5xvi1gJgY3L/D91L/4fupf9D92ro/5X4vVMlAdbQSr7Xf3sGquujGLd9INJ1UYy2Au3/HsStDry9PorRRqDTVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDV8X8AAAD//5Av7lk=")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f000001fa00)={0x8, 0x5, 0x0, 0x0, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

8m2.132716186s ago: executing program 3 (id=1675):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r3)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, 0x0, 0x0)
r6 = dup(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x0, 0x19f4, 0x7, 0x8500, r6, 0x8, '\x00', 0x0, r6, 0x5, 0x1, 0x3, 0x0, @value=r6}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_unix(&(0x7f0000000480)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x20, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r9 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

8m1.926048259s ago: executing program 3 (id=1680):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
dup3(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x401}, 0x18)
move_mount(r2, &(0x7f0000000100)='./bus\x00', r3, &(0x7f00000000c0)='./bus\x00', 0x14)
sendfile(r3, r2, 0x0, 0x7ffff000)

8m1.90610029s ago: executing program 34 (id=1680):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
dup3(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x401}, 0x18)
move_mount(r2, &(0x7f0000000100)='./bus\x00', r3, &(0x7f00000000c0)='./bus\x00', 0x14)
sendfile(r3, r2, 0x0, 0x7ffff000)

7m57.556033626s ago: executing program 1 (id=1741):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xb1e3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x24000080, &(0x7f0000000000)={0x2, 0x5e22, @rand_addr=0x64010101}, 0x10)
fallocate(0xffffffffffffffff, 0x3, 0x9, 0x10000)
r4 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r4, 0x0, 0x5, 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x6)
r6 = dup3(r4, r5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(r6, 0x0, 0x5, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)

7m57.435488459s ago: executing program 1 (id=1745):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000))
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8001}]}}]}, 0x3c}}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0xfffffffd)
futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x1, 0xa3020000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='devlink_health_report\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0xc4000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440))
memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)

7m56.407857124s ago: executing program 1 (id=1757):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0)

7m56.406590644s ago: executing program 1 (id=1759):
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="2f00000000000000000000000000000085000000190000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fddbdf251714000400f9d6a700de44d40252bd9cccbee4305c24000300b8143881c9033e4541ea1839cbb68c930f9dc8319db7bec8ddb20c746226e47108000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="0c0006000200000002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x400000}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r8 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)

7m56.403085124s ago: executing program 1 (id=1761):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050)

7m54.019643241s ago: executing program 1 (id=1806):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x40}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noinit_itable}, {@errors_remount}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="1ebf5c7e439cc280"], 0x20}, 0x1, 0x0, 0x0, 0x4891}, 0x48006)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x850, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2a0471a, &(0x7f0000000540)={[{@quota}, {@dioread_lock}, {@nouid32}, {@nogrpid}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x47c, &(0x7f0000001740)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f000001fa00)={0x8, 0x5, 0x0, 0x0, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

7m54.008427041s ago: executing program 35 (id=1806):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x40}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noinit_itable}, {@errors_remount}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="1ebf5c7e439cc280"], 0x20}, 0x1, 0x0, 0x0, 0x4891}, 0x48006)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x850, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2a0471a, &(0x7f0000000540)={[{@quota}, {@dioread_lock}, {@nouid32}, {@nogrpid}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x47c, &(0x7f0000001740)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f000001fa00)={0x8, 0x5, 0x0, 0x0, 0x5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

2m9.061508992s ago: executing program 7 (id=5579):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
close(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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")
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m8.677495568s ago: executing program 7 (id=5584):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4)
bind$can_raw(r0, &(0x7f00000000c0), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2m8.590886469s ago: executing program 7 (id=5585):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x80, 0x8000, 0x0, 0xb9ff, 0x15})
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m8.455790481s ago: executing program 7 (id=5586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r2 = getpid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x3e, 0x5, @tid=r2}, &(0x7f0000000240))
fchdir(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
lseek(r3, 0x9, 0x3)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x368, 0xd0, 0x0, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)

2m8.362164392s ago: executing program 7 (id=5588):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) (async)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000400)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) (async)
bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x39)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r6, 0x400, 0x1)
fremovexattr(r6, &(0x7f0000000200)=@known='trusted.syz\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180ebb006100000000000000060000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x801, 0x8, &(0x7f0000000000)=""/8}, 0x94)

2m7.88291276s ago: executing program 7 (id=5594):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_file_get\x00', r0, 0x0, 0x26a0b27b}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x8031, 0xffffffffffffffff, 0xabfc7000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000120000000000000000850000006d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
mq_timedsend(r0, &(0x7f0000000480)="6c6a7299795e4d183a96dc00536d211f39b20359a6cffc703e8f36ee43cb85f74dfedcbbee8f7fa55e1eebe47a8e0806291b5fad9332e3e9d49d5328f28d1bd30368a9cde007d2b247816938b85508b1", 0x50, 0x100000000, &(0x7f0000000200)={0x0, 0x3938700})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000400)="b101b48e382b36f0d7e762cc124e0bf6e60dc1450c6565031c9847ac3cd6e32164e82161dc177c35a1ee0a14490dd143cd08bdb0fb996a5c85f34031e154a4837e1599b22f78e94fe7e2ceb01025ec0f501a901c42843f851783644e8725846f0cf62e20")
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000300)='./file0\x00', 0x4000442)
syz_clone(0xa000000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)

2m7.88243932s ago: executing program 36 (id=5594):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_file_get\x00', r0, 0x0, 0x26a0b27b}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x8031, 0xffffffffffffffff, 0xabfc7000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000120000000000000000850000006d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
mq_timedsend(r0, &(0x7f0000000480)="6c6a7299795e4d183a96dc00536d211f39b20359a6cffc703e8f36ee43cb85f74dfedcbbee8f7fa55e1eebe47a8e0806291b5fad9332e3e9d49d5328f28d1bd30368a9cde007d2b247816938b85508b1", 0x50, 0x100000000, &(0x7f0000000200)={0x0, 0x3938700})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000400)="b101b48e382b36f0d7e762cc124e0bf6e60dc1450c6565031c9847ac3cd6e32164e82161dc177c35a1ee0a14490dd143cd08bdb0fb996a5c85f34031e154a4837e1599b22f78e94fe7e2ceb01025ec0f501a901c42843f851783644e8725846f0cf62e20")
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000300)='./file0\x00', 0x4000442)
syz_clone(0xa000000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)

3.118223082s ago: executing program 5 (id=7120):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x8)
fcntl$setlease(r1, 0x400, 0x1)
fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

3.087343722s ago: executing program 6 (id=7121):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nolazytime}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

3.037341153s ago: executing program 5 (id=7122):
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

2.975585994s ago: executing program 6 (id=7123):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)="b8", 0x1}], 0x1}}], 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
close(r1)
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='xen_mmu_set_p4d\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xadda, 0x10100, 0x1, 0x1ff, 0x0, r0}, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000980)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)

2.829161186s ago: executing program 5 (id=7125):
syz_clone3(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2000000000000218, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.58746079s ago: executing program 5 (id=7128):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000020514e8c9bc96461000000000000000000000000b7080000000000007b8af8ff00000000b708000000f000007b8af0ff00000000bfa100002300000007010000f8ffffffbfa40000000000000704000000800000b7020000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf94e9898e3717a49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365)
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6", 0x6b}, {&(0x7f00000004c0)="846d2ad6d4ef6560542286af609ff6ca49c12d9b19e1843ce4c332e6f0932bc521d0bdcd40638430b5dbdb1a26009aaba510eb36442d9c3fb54c6b14c0e5c2867c43e8a75801149e1613c3fc8a5fd8470359795f85d3741efcbe77df1b9bfad527863f7684842cce7eeb775eda", 0x6d}], 0x2}, 0x200000d4)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000e80)=ANY=[@ANYRESDEC=r2, @ANYBLOB="e19530c4dc12b317c69040b4e2b418173e3d7dd14717d54350fbf176dcd49f6fcfcbcd8647d79046fd48a74f70f1f2e90a19b7c5bba85233477c91c068f43eae", @ANYBLOB="3f7964687a60aa2dbdd61febcd15b1484aba76398f21291a07a32fa46ac729ad5bca58a8c29973fa4cfc4f2ae76f805cf65f9e46c6621a97cf841883d9e82df4dafbc814a43d7d65a3ce5543407c74f63ea18bb58aa4decb2e4b47bf3bb79ea9176dd54ddc4531bfdf7b2f842e0c90ad156445035665021df8cb75e9bf4beb9717a2b3e4dba5164f74251a5f601d93d31e9d66c9265aedad136c383546dc35c24b494d5c81e5d15044f334584be73b7fcf540ac4e3e9734f44b4af6147bc785713eb65d78b091fb17e78cda15d8326c6e3120a01eaae71418a511a4031cab828406fce9e952239482ff2dc199474513ca8a441bf293677", @ANYBLOB="2cb55553e0e91cfe3c883f69b352b3e17528bd0effb72a2fd707ea06770ee029652f0db13465cfcb3e436640e4d587338fc9a6408470fdcddc318d06", @ANYRESOCT=r1, @ANYRES64=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
inotify_init()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15)
dup(r5)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r3)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440))
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.273142495s ago: executing program 4 (id=7131):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x4, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, 0x0, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x4040)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES8=r4, @ANYRES8=r4, @ANYRES64, @ANYRESHEX=r2, @ANYRESHEX=r2], &(0x7f0000000100)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
r7 = socket(0x10, 0x2, 0x0)
sendto$inet6(r7, &(0x7f00000007c0), 0x0, 0x2251197285d76a80, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r9, 0x0, 0x2}, 0x18)
fgetxattr(r5, &(0x7f0000000140)=@random={'osx.', '\x00'}, &(0x7f0000000740)=""/197, 0xc5)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
modify_ldt$read(0x0, &(0x7f0000000000)=""/20, 0x14)
unshare(0x2040400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2.230174285s ago: executing program 5 (id=7133):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$sg(&(0x7f00000000c0), 0x7ff, 0x2100)
write$binfmt_script(r4, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

2.098071877s ago: executing program 6 (id=7135):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @local, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x7fffffff, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, r2, 0x0, 0x3}, 0x50)

2.017297209s ago: executing program 6 (id=7136):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x100000, &(0x7f0000000480), 0x1, 0x3da, &(0x7f0000000a40)="$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")
syz_clone3(&(0x7f0000001880)={0x1008c0600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x100, 0x35522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2000000000000218, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
gettid()
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1.93779704s ago: executing program 8 (id=7137):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
r1 = semget$private(0x0, 0x3, 0x2c)
semop(r1, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1)
semop(r1, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x7, 0x2])
semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000300)=""/241)
removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00')
lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
socketpair(0x6, 0x0, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX], 0x0}, 0x94)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000)
r2 = io_uring_setup(0x7870, &(0x7f0000000580)={0x0, 0x8ffffffc, 0x1000, 0x2, 0x2b7, 0x0, r0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='rseq_ip_fixup\x00', r4}, 0xfffffe1f)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r6=>0xffffffffffffffff])
keyctl$chown(0x4, r5, 0xee01, r6)
keyctl$setperm(0x5, r5, 0x0)
keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000004c0)="a1b84a749d9cec6807133b1125d54d9ebd0df7c3e0f450a2011d384003ffc70d72ff0dcf7e4171b9b4f0704239f2f9dbbb62b45f2f3708af91809d46c7ced619e305a2524ad51802171025e4c3276bce3c0b8dd65dec48f54e85283be831427e2fa29f8bb1340d453520be75e1bc778336253ff9ce7df4ea131d9547c0111136a38a89e85b0c0cf2e22013898c1d245f62129bf00ea2e1d8b822b61d9f2191feb7851e078515", 0xa6, r5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0)

1.582605915s ago: executing program 9 (id=7138):
syz_clone3(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2000000000000218, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1.473802427s ago: executing program 4 (id=7139):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x0, 0x0, 0x800}}, 0x120)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
open_tree(0xffffffffffffffff, &(0x7f0000000700)='./cgroup/../file0\x00', 0x89101)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0400000000001900b7080000000000107b8abdce737a6ff86e5e00000000b703000008005623010d00000000030000009500"/59], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000500)}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x7c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x30, 0x5, 0xb}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xbe9}]}}]}, 0x7c}}, 0x44080)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x3d0, 0x0, 0x4a0, 0x2d8, 0x4a0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b, 0x0, 0x1}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x6, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8)
sync()
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
sync()
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000089a8078768096b", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRES8=r8, @ANYBLOB="e110f0c40014574b67fca7e7b25a3884bae61429a20db7151a273f897f2f732b674df38f9aef60e992b807f7f958e0fc76a890613c0ee6031ef49c796fa386c83ac15ea3a87b7baa091e714eb6f651bbc22967ad5bb46ea435ce26167189955a2cf1bae646908927ee68fbe37f47c34b4702c9613a5ceef42a81c1b99cc6da4188b7473c9333e4283fb83fc1537dde50d2f7ac32b6a8684b1a9c770d233d839b8a73b392d96d2d77e1466190a9eff5f0288743d3aa47f5e037", @ANYRESHEX=r2], 0x18}}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})

1.041250164s ago: executing program 6 (id=7140):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x7, 0x7ffc1ffb}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
accept(r2, 0x0, 0x0)

1.040507264s ago: executing program 8 (id=7141):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=<r1=>r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf94e9898e3717a49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r4 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6", 0x6b}, {&(0x7f00000004c0)="846d2ad6d4ef6560542286af609ff6ca49c12d9b19e1843ce4c332e6f0932bc521d0bdcd40638430b5dbdb1a26009aaba510eb36442d9c3fb54c6b14c0e5c2867c43e8a75801149e1613c3fc8a5fd8470359795f85d3741efcbe77df1b9bfad527863f7684842cce7eeb775eda", 0x6d}], 0x2}, 0x200000d4)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000e80)=ANY=[@ANYRESDEC=r2, @ANYBLOB="e19530c4dc12b317c69040b4e2b418173e3d7dd14717d54350fbf176dcd49f6fcfcbcd8647d79046fd48a74f70f1f2e90a19b7c5bba85233477c91c068f43eae", @ANYBLOB="3f7964687a60aa2dbdd61febcd15b1484aba76398f21291a07a32fa46ac729ad5bca58a8c29973fa4cfc4f2ae76f805cf65f9e46c6621a97cf841883d9e82df4dafbc814a43d7d65a3ce5543407c74f63ea18bb58aa4decb2e4b47bf3bb79ea9176dd54ddc4531bfdf7b2f842e0c90ad156445035665021df8cb75e9bf4beb9717a2b3e4dba5164f74251a5f601d93d31e9d66c9265aedad136c383546dc35c24b494d5c81e5d15044f334584be73b7fcf540ac4e3e9734f44b4af6147bc785713eb65d78b091fb17e78cda15d8326c6e3120a01eaae71418a511a4031cab828406fce9e952239482ff2dc199474513ca8a441bf293677", @ANYBLOB="2cb55553e0e91cfe3c883f69b352b3e17528bd0effb72a2fd707ea06770ee029652f0db13465cfcb3e436640e4d587338fc9a6408470fdcddc318d06", @ANYRESOCT=r1, @ANYRES64=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
inotify_init()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15)
dup(r6)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc)
syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r4)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440))
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

897.467796ms ago: executing program 9 (id=7142):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x110, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x100, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0)

864.600466ms ago: executing program 9 (id=7143):
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, r4, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x58}}, 0x0)

834.532807ms ago: executing program 9 (id=7144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_setup(0x5, &(0x7f0000000e80))

732.603788ms ago: executing program 9 (id=7145):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000002c0)={[{@grpjquota}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x460, &(0x7f0000000680)="$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")

676.509479ms ago: executing program 5 (id=7146):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000b40)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x1, 0x585, &(0x7f0000000580)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)

627.69624ms ago: executing program 4 (id=7147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x8080c, 0x4, &(0x7f0000000000))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000080), 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x7, 0x9}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

503.782602ms ago: executing program 4 (id=7148):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x0, 0x0, 0x800}}, 0x120)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
lstat(&(0x7f0000000b00)='./cgroup/../file0\x00', &(0x7f0000000a80))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
open_tree(0xffffffffffffffff, &(0x7f0000000700)='./cgroup/../file0\x00', 0x89101)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0400000000001900b7080000000000107b8abdce737a6ff86e5e00000000b703000008005623010d00000000030000009500"/59], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000500)}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x7c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x30, 0x5, 0xb}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xbe9}]}}]}, 0x7c}}, 0x44080)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x3d0, 0x0, 0x4a0, 0x2d8, 0x4a0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b, 0x0, 0x1}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x6, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8)
sync()
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
sync()
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000089a8078768096b", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRES8=r8, @ANYBLOB="e110f0c40014574b67fca7e7b25a3884bae61429a20db7151a273f897f2f732b674df38f9aef60e992b807f7f958e0fc76a890613c0ee6031ef49c796fa386c83ac15ea3a87b7baa091e714eb6f651bbc22967ad5bb46ea435ce26167189955a2cf1bae646908927ee68fbe37f47c34b4702c9613a5ceef42a81c1b99cc6da4188b7473c9333e4283fb83fc1537dde50d2f7ac32b6a8684b1a9c770d233d839b8a73b392d96d2d77e1466190a9eff5f0288743d3aa47f5e037", @ANYRESHEX=r2], 0x18}}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})

343.886304ms ago: executing program 9 (id=7149):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x4, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, 0x0, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x4040)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES8=r4, @ANYRES8=r4, @ANYRES64, @ANYRESHEX=r2, @ANYRESHEX=r2], &(0x7f0000000100)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
r7 = socket(0x10, 0x2, 0x0)
sendto$inet6(r7, &(0x7f00000007c0), 0x0, 0x2251197285d76a80, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r9, 0x0, 0x2}, 0x18)
fgetxattr(r5, &(0x7f0000000140)=@random={'osx.', '\x00'}, &(0x7f0000000740)=""/197, 0xc5)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
modify_ldt$read(0x0, &(0x7f0000000000)=""/20, 0x14)
unshare(0x2040400)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

199.876306ms ago: executing program 8 (id=7150):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132000012000000000200"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

157.047817ms ago: executing program 4 (id=7151):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132000012000000000200"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

134.159018ms ago: executing program 4 (id=7152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_setup(0x5, &(0x7f0000000e80))

125.986578ms ago: executing program 8 (id=7153):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setrlimit(0x40000000000008, &(0x7f0000000000))
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x4c880, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback, 0x100}, 0x1c)
sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484)

113.107608ms ago: executing program 6 (id=7154):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18)
socket$igmp6(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50)

99.731828ms ago: executing program 8 (id=7155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r3=>0x0})
timer_create(0x1, &(0x7f0000000200)={0x0, 0x38, 0x4, @tid=r3}, &(0x7f0000000340))
ioctl$TCSETA(r2, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "29000000f20800"})

0s ago: executing program 8 (id=7156):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
syz_open_dev$sg(0x0, 0x7ff, 0x2100)
write$binfmt_script(r4, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

kernel console output (not intermixed with test programs):

0000:0000.001D: unknown main item tag 0x0
[  584.537247][ T1099] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  584.537271][ T1099] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  584.538908][ T1099] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  584.610001][T27229] loop4: detected capacity change from 0 to 1024
[  584.630201][T27229] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  584.647461][T27229] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.6663: lblock 1 mapped to illegal pblock 1 (length 15)
[  584.661972][T27229] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  584.674500][T27229] EXT4-fs (loop4): This should not happen!! Data will be lost
[  584.674500][T27229] 
[  584.687502][T27229] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6663'.
[  584.702963][T27229] pim6reg: entered allmulticast mode
[  584.709340][T27229] pim6reg: left allmulticast mode
[  584.739267][T27239] loop8: detected capacity change from 0 to 1024
[  584.749712][T27239] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  584.763446][T27239] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6667: lblock 1 mapped to illegal pblock 1 (length 15)
[  584.778655][T27239] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  584.791046][T27239] EXT4-fs (loop8): This should not happen!! Data will be lost
[  584.791046][T27239] 
[  584.805833][T27243] loop5: detected capacity change from 0 to 1024
[  584.810517][T27239] pim6reg: entered allmulticast mode
[  584.812508][T27243] EXT4-fs: Ignoring removed mblk_io_submit option
[  584.820173][T27239] pim6reg: left allmulticast mode
[  584.824375][T27243] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  585.022947][T27264] loop4: detected capacity change from 0 to 512
[  585.030474][T27264] EXT4-fs (loop4): orphan cleanup on readonly fs
[  585.037173][T27264] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6675: Failed to acquire dquot type 1
[  585.050570][T27264] EXT4-fs (loop4): 1 truncate cleaned up
[  585.209049][T27277] validate_nla: 6 callbacks suppressed
[  585.209062][T27277] netlink: 'syz.9.6677': attribute type 1 has an invalid length.
[  585.237549][T27279] loop9: detected capacity change from 0 to 164
[  585.367017][T27280] Unsupported NM flag settings (8)
[  585.577614][T27282] netlink: 'syz.5.6679': attribute type 1 has an invalid length.
[  585.585365][T27282] __nla_validate_parse: 3 callbacks suppressed
[  585.585378][T27282] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6679'.
[  585.666523][T27290] loop5: detected capacity change from 0 to 1024
[  585.679154][T27290] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  585.692390][T27290] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.6683: lblock 1 mapped to illegal pblock 1 (length 15)
[  585.706818][T27290] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  585.719216][T27290] EXT4-fs (loop5): This should not happen!! Data will be lost
[  585.719216][T27290] 
[  585.730695][T27290] netlink: 'syz.5.6683': attribute type 21 has an invalid length.
[  585.738749][T27290] netlink: 'syz.5.6683': attribute type 1 has an invalid length.
[  585.746494][T27290] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6683'.
[  585.761057][T27290] pim6reg: entered allmulticast mode
[  585.767335][T27290] pim6reg: left allmulticast mode
[  585.840626][T26487] EXT4-fs unmount: 119 callbacks suppressed
[  585.840642][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.893178][T27299] loop5: detected capacity change from 0 to 512
[  585.900058][T27299] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  585.921323][T27299] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6686: bg 0: block 435: padding at end of block bitmap is not set
[  585.944484][T27299] EXT4-fs (loop5): 1 truncate cleaned up
[  585.951580][T27299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.964598][T27302] loop8: detected capacity change from 0 to 512
[  585.985441][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.018670][T27307] loop5: detected capacity change from 0 to 1024
[  586.029156][T27307] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  586.125773][T27315] netlink: 'syz.9.6691': attribute type 1 has an invalid length.
[  586.133644][T27315] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6691'.
[  586.174376][T27318] loop5: detected capacity change from 0 to 1024
[  586.181085][T27318] EXT4-fs: Ignoring removed mblk_io_submit option
[  586.188479][T27318] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  586.209293][T27318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.313494][T27324] loop9: detected capacity change from 0 to 1024
[  586.320300][T27324] EXT4-fs: Ignoring removed mblk_io_submit option
[  587.064105][T27327] loop4: detected capacity change from 0 to 512
[  587.157336][T27333] loop8: detected capacity change from 0 to 8192
[  587.165114][T27324] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  587.179489][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.189374][T27327] EXT4-fs (loop4): orphan cleanup on readonly fs
[  587.206933][T27324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.235613][T27327] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6696: Failed to acquire dquot type 1
[  587.294072][T27327] EXT4-fs (loop4): 1 truncate cleaned up
[  587.319440][T27333] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  587.364358][T27327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  587.411121][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.477416][T27345] loop8: detected capacity change from 0 to 1024
[  587.520645][T27345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  587.574114][T27345] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.613208][T27348] loop4: detected capacity change from 0 to 8192
[  587.628859][T27345] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6699: lblock 1 mapped to illegal pblock 1 (length 15)
[  587.667798][T27345] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  587.680357][T27345] EXT4-fs (loop8): This should not happen!! Data will be lost
[  587.680357][T27345] 
[  587.702394][T27348] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  587.722703][T27352] netlink: 'syz.8.6699': attribute type 21 has an invalid length.
[  587.737221][T27352] netlink: 'syz.8.6699': attribute type 1 has an invalid length.
[  587.745079][T27352] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6699'.
[  587.762579][T27345] pim6reg: entered allmulticast mode
[  587.770462][T27345] pim6reg: left allmulticast mode
[  587.776269][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.819099][T27358] netlink: 'syz.4.6703': attribute type 1 has an invalid length.
[  587.826863][T27358] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6703'.
[  587.835579][T27360] loop9: detected capacity change from 0 to 164
[  587.887608][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.920107][T27371] loop8: detected capacity change from 0 to 1024
[  587.926824][T27371] EXT4-fs: Ignoring removed orlov option
[  587.950917][T27371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  588.016878][T27375] loop9: detected capacity change from 0 to 1024
[  588.023683][T27375] EXT4-fs: Ignoring removed mblk_io_submit option
[  588.031407][T27375] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  588.091512][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.118710][T27375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  588.209254][T27383] loop4: detected capacity change from 0 to 8192
[  588.266318][T27383] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  588.325094][T27385] loop5: detected capacity change from 0 to 1024
[  588.342910][T27385] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  588.515601][T27394] loop4: detected capacity change from 0 to 8192
[  588.972188][   T29] kauditd_printk_skb: 395 callbacks suppressed
[  588.972203][   T29] audit: type=1326 audit(1752734422.188:21761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.002854][   T29] audit: type=1326 audit(1752734422.188:21762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.026500][   T29] audit: type=1326 audit(1752734422.188:21763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.050068][   T29] audit: type=1326 audit(1752734422.188:21764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.073636][   T29] audit: type=1326 audit(1752734422.188:21765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.097199][   T29] audit: type=1326 audit(1752734422.188:21766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.120830][   T29] audit: type=1326 audit(1752734422.188:21767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.144528][   T29] audit: type=1326 audit(1752734422.188:21768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.168093][   T29] audit: type=1326 audit(1752734422.188:21769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.191667][   T29] audit: type=1326 audit(1752734422.188:21770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27398 comm="syz.8.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  589.232209][T27407] loop8: detected capacity change from 0 to 1024
[  589.248934][T27407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  589.271026][T27407] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.363014][T27399] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6719: lblock 1 mapped to illegal pblock 1 (length 15)
[  589.398175][T27399] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  589.410733][T27399] EXT4-fs (loop8): This should not happen!! Data will be lost
[  589.410733][T27399] 
[  589.444413][T27407] netlink: 'syz.8.6719': attribute type 21 has an invalid length.
[  589.469741][T27407] netlink: 'syz.8.6719': attribute type 1 has an invalid length.
[  589.477540][T27407] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6719'.
[  589.504563][T27399] pim6reg: entered allmulticast mode
[  589.548928][T27399] pim6reg: left allmulticast mode
[  589.554450][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.570045][T27420] loop4: detected capacity change from 0 to 1024
[  589.570318][T27420] EXT4-fs: Ignoring removed orlov option
[  589.590304][T27420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  589.622974][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.696283][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.712071][T27432] loop9: detected capacity change from 0 to 1024
[  589.720036][T27432] EXT4-fs: Ignoring removed orlov option
[  589.738414][T27432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.782681][T27439] loop8: detected capacity change from 0 to 1024
[  589.822968][T27439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  589.869349][T27439] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.951546][T27439] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6732: lblock 1 mapped to illegal pblock 1 (length 15)
[  589.966126][T27439] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  589.978587][T27439] EXT4-fs (loop8): This should not happen!! Data will be lost
[  589.978587][T27439] 
[  589.994277][T27439] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6732'.
[  590.010507][T27439] pim6reg: entered allmulticast mode
[  590.026758][T27439] pim6reg: left allmulticast mode
[  590.045113][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.097395][T27446] futex_wake_op: syz.4.6731 tries to shift op by 32; fix this program
[  590.109903][T27450] futex_wake_op: syz.5.6734 tries to shift op by 32; fix this program
[  590.188938][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.228022][T27465] loop5: detected capacity change from 0 to 164
[  590.246602][T27467] loop9: detected capacity change from 0 to 1024
[  590.323868][T27470] loop8: detected capacity change from 0 to 1024
[  590.330842][T27470] EXT4-fs: Ignoring removed mblk_io_submit option
[  590.345978][T26723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.358137][T27470] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  590.372926][T27467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.386054][T27469] Unsupported NM flag settings (8)
[  590.394530][T27467] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.410844][T27467] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.6739: lblock 1 mapped to illegal pblock 1 (length 15)
[  590.426510][T27467] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  590.438946][T27467] EXT4-fs (loop9): This should not happen!! Data will be lost
[  590.438946][T27467] 
[  590.463023][T27477] loop6: detected capacity change from 0 to 512
[  590.471472][T27477] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  590.482524][T27470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.498843][T27478] validate_nla: 2 callbacks suppressed
[  590.498856][T27478] netlink: 'syz.9.6739': attribute type 21 has an invalid length.
[  590.515363][T27477] EXT4-fs (loop6): 1 truncate cleaned up
[  590.521833][T27477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.535349][T27478] netlink: 'syz.9.6739': attribute type 1 has an invalid length.
[  590.543158][T27478] netlink: 144 bytes leftover after parsing attributes in process `syz.9.6739'.
[  590.565867][T26723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.593753][T27467] pim6reg: entered allmulticast mode
[  590.616125][T27467] pim6reg: left allmulticast mode
[  590.741029][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.819520][T27489] loop4: detected capacity change from 0 to 1024
[  590.828792][T27489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.842176][T27489] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.856502][T27489] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.6746: lblock 1 mapped to illegal pblock 1 (length 15)
[  590.871993][T27489] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  590.884392][T27489] EXT4-fs (loop4): This should not happen!! Data will be lost
[  590.884392][T27489] 
[  590.897346][T27489] netlink: 'syz.4.6746': attribute type 21 has an invalid length.
[  590.905428][T27489] netlink: 'syz.4.6746': attribute type 1 has an invalid length.
[  590.913201][T27489] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6746'.
[  590.931604][T27489] pim6reg: entered allmulticast mode
[  590.939494][T27489] pim6reg: left allmulticast mode
[  591.145375][T27495] netlink: 'syz.5.6748': attribute type 1 has an invalid length.
[  591.153186][T27495] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6748'.
[  591.304870][T27500] loop5: detected capacity change from 0 to 512
[  591.312697][T27500] EXT4-fs (loop5): orphan cleanup on readonly fs
[  591.320278][T27500] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6750: Failed to acquire dquot type 1
[  591.331992][T27500] EXT4-fs (loop5): 1 truncate cleaned up
[  591.355759][T27506] loop6: detected capacity change from 0 to 512
[  591.365076][T27500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  591.419463][T27506] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6741: Failed to acquire dquot type 1
[  591.432325][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.448586][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.461466][T27514] loop9: detected capacity change from 0 to 512
[  591.471174][T27506] EXT4-fs (loop6): 1 truncate cleaned up
[  591.477140][T27506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  591.508422][T27514] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  591.529407][T27518] loop4: detected capacity change from 0 to 1024
[  591.536158][T27506] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  591.547775][T27514] EXT4-fs (loop9): 1 truncate cleaned up
[  591.553704][T27514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.566195][T27518] EXT4-fs: Ignoring removed orlov option
[  591.586555][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.600117][T27518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.619446][T26723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.637855][T27525] loop5: detected capacity change from 0 to 1024
[  591.650751][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.661653][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.675395][T27529] loop4: detected capacity change from 0 to 512
[  591.682926][T27529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  591.696620][T27525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.711861][T27529] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6760: bg 0: block 435: padding at end of block bitmap is not set
[  591.715603][T27535] loop6: detected capacity change from 0 to 1024
[  591.732723][T27525] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  591.749632][T27525] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.6758: lblock 1 mapped to illegal pblock 1 (length 15)
[  591.778744][T27529] EXT4-fs (loop4): 1 truncate cleaned up
[  591.785298][T27535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.800618][T27525] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  591.804293][T27543] netlink: 'syz.5.6758': attribute type 21 has an invalid length.
[  591.813104][T27525] EXT4-fs (loop5): This should not happen!! Data will be lost
[  591.813104][T27525] 
[  591.821205][T27529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  591.830681][T27535] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  591.843124][T27543] netlink: 'syz.5.6758': attribute type 1 has an invalid length.
[  591.861126][T27543] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6758'.
[  591.885670][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.910517][T27544] futex_wake_op: syz.9.6761 tries to shift op by 32; fix this program
[  591.923859][T27546] pim6reg: entered allmulticast mode
[  591.932866][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  591.940404][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  591.946091][T27525] pim6reg: left allmulticast mode
[  591.947821][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  591.947843][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  591.957809][T27535] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm syz.6.6757: lblock 1 mapped to illegal pblock 1 (length 15)
[  591.960256][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  591.970742][T27535] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  591.981799][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  591.981889][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  591.989177][T27535] EXT4-fs (loop6): This should not happen!! Data will be lost
[  591.989177][T27535] 
[  592.003726][T27535] netlink: 'syz.6.6757': attribute type 21 has an invalid length.
[  592.008900][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.041250][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.041275][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.041298][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.041318][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.070859][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.070903][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.070927][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.070948][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.070968][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.070988][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071061][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071084][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071106][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071176][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071205][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071229][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071250][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071270][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071340][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071362][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071384][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071403][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071473][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071493][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071513][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071533][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071553][ T6385] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  592.071908][ T6385] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  592.080338][T27552] netlink: 'syz.4.6762': attribute type 5 has an invalid length.
[  592.260771][T27535] netlink: 'syz.6.6757': attribute type 1 has an invalid length.
[  592.268624][T27535] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6757'.
[  592.280645][T27555] pim6reg: entered allmulticast mode
[  592.292315][T27556] pim6reg: left allmulticast mode
[  592.316264][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.335687][T27565] loop4: detected capacity change from 0 to 1024
[  592.337114][T27567] 9pnet_fd: Insufficient options for proto=fd
[  592.359372][T27565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.371915][T27565] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  592.388650][T27571] loop5: detected capacity change from 0 to 512
[  592.410639][T27565] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.6767: lblock 1 mapped to illegal pblock 1 (length 15)
[  592.428448][T27571] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6768: Failed to acquire dquot type 1
[  592.430393][T27577] loop8: detected capacity change from 0 to 512
[  592.448363][T27577] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  592.449807][T26723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.458579][T27565] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  592.467880][T27579] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6767'.
[  592.479475][T27565] EXT4-fs (loop4): This should not happen!! Data will be lost
[  592.479475][T27565] 
[  592.492122][T27571] EXT4-fs (loop5): 1 truncate cleaned up
[  592.500003][T27577] EXT4-fs (loop8): 1 truncate cleaned up
[  592.506131][T27571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  592.522132][T27577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.527684][T27571] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  592.574999][T27565] pim6reg: entered allmulticast mode
[  592.578514][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.583074][T27565] pim6reg: left allmulticast mode
[  592.612620][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.630350][T27587] loop8: detected capacity change from 0 to 512
[  592.638872][T27587] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  592.659715][T27587] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6772: bg 0: block 435: padding at end of block bitmap is not set
[  592.697731][T27587] EXT4-fs (loop8): 1 truncate cleaned up
[  592.713980][T27587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  592.735887][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.765201][T27592] loop9: detected capacity change from 0 to 8192
[  592.803795][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.838941][T27601] loop8: detected capacity change from 0 to 1024
[  592.849726][T27601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.862086][T27601] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  592.880066][T27601] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6777: lblock 1 mapped to illegal pblock 1 (length 15)
[  592.894488][T27601] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  592.906953][T27601] EXT4-fs (loop8): This should not happen!! Data will be lost
[  592.906953][T27601] 
[  592.919259][T27601] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6777'.
[  592.941915][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  592.942070][T27601] pim6reg: entered allmulticast mode
[  592.949430][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  592.949453][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  592.969811][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  592.971903][T27601] pim6reg: left allmulticast mode
[  592.977187][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  592.989723][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  592.997162][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.004592][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.012038][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.019570][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.026957][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.034443][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.040203][T27616] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  593.041837][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.055536][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.063055][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.070673][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.078118][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.085553][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.092965][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.100414][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.107886][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.115276][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.122663][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.130035][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.137392][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.144783][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.152252][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.159707][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.167154][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.167175][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.167196][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.167238][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.167263][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.167283][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.167381][   T36] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  593.175998][   T36] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  593.227375][T27625] loop4: detected capacity change from 0 to 1024
[  593.237177][T27625] EXT4-fs: Ignoring removed orlov option
[  593.245998][T27625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.308774][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.319589][T27628] loop5: detected capacity change from 0 to 512
[  593.328860][T27628] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6785: Failed to acquire dquot type 1
[  593.343172][T27628] EXT4-fs (loop5): 1 truncate cleaned up
[  593.360081][T27628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.374237][T27628] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  593.497062][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.507987][T27642] loop6: detected capacity change from 0 to 1024
[  593.535618][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.538390][T27642] EXT4-fs: Ignoring removed orlov option
[  593.579827][T27642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  593.624948][T27651] loop4: detected capacity change from 0 to 512
[  593.682938][T27651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  593.707172][T27651] EXT4-fs (loop4): 1 truncate cleaned up
[  593.727783][T27651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.753765][T27654] loop9: detected capacity change from 0 to 512
[  593.761701][T27669] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6801'.
[  593.774336][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.778178][T27654] EXT4-fs: Ignoring removed nobh option
[  593.825904][T27654] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  593.837575][T27654] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  593.847694][T27654] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6796: Corrupt directory, running e2fsck is recommended
[  593.848977][T27670] futex_wake_op: syz.8.6799 tries to shift op by 32; fix this program
[  593.871246][T27654] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  593.914257][T27654] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.6796: corrupted in-inode xattr: invalid ea_ino
[  593.943739][T27678] loop4: detected capacity change from 0 to 512
[  593.954702][T27654] EXT4-fs (loop9): Remounting filesystem read-only
[  593.987399][T27654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  594.004730][T27654] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  594.016238][T27654] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  594.026375][T27654] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6796: Corrupt directory, running e2fsck is recommended
[  594.026625][T27675] loop5: detected capacity change from 0 to 8192
[  594.048627][T27654] usb usb1: usbfs: process 27654 (syz.9.6796) did not claim interface 0 before use
[  594.058383][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6796'.
[  594.071226][T27654] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  594.082800][T27654] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  594.092885][T27654] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6796: Corrupt directory, running e2fsck is recommended
[  594.106842][T27678] __quota_error: 591 callbacks suppressed
[  594.106893][T27678] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  594.122674][T27678] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  594.132818][T27678] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6802: Failed to acquire dquot type 1
[  594.151500][T27678] EXT4-fs (loop4): 1 truncate cleaned up
[  594.161598][T27678] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  594.300862][   T29] audit: type=1326 audit(1752734427.518:22354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27697 comm="syz.8.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  594.324550][   T29] audit: type=1326 audit(1752734427.518:22355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27697 comm="syz.8.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  594.360422][   T29] audit: type=1326 audit(1752734427.568:22356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27697 comm="syz.8.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  594.384027][   T29] audit: type=1326 audit(1752734427.568:22357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27697 comm="syz.8.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  594.407672][   T29] audit: type=1326 audit(1752734427.568:22358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27697 comm="syz.8.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  594.453574][   T29] audit: type=1326 audit(1752734427.668:22359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.4.6813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  594.477841][   T29] audit: type=1326 audit(1752734427.668:22360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.4.6813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  594.501509][   T29] audit: type=1326 audit(1752734427.668:22361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.4.6813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  594.632199][T27714] loop8: detected capacity change from 0 to 8192
[  594.666625][T27715] futex_wake_op: syz.9.6815 tries to shift op by 32; fix this program
[  594.776243][T27727] loop9: detected capacity change from 0 to 512
[  594.789979][T27727] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6820: Failed to acquire dquot type 1
[  594.802127][T27727] EXT4-fs (loop9): 1 truncate cleaned up
[  594.808968][T27734] loop5: detected capacity change from 0 to 512
[  594.809639][T27727] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  595.175788][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.183374][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.190861][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.198301][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.205800][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.213344][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.220741][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.228229][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.235687][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.243114][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.250579][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.258039][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.265502][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.273024][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.280426][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.280837][T27747] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  595.287819][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.287844][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.308958][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.316350][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.323860][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.331283][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.338756][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.346134][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.353581][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.361064][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.368592][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.375969][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.383423][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.390823][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.398229][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.405612][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.413048][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.420460][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.428059][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.428088][ T6385] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  595.483745][T27755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  595.488223][ T6385] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  595.491023][T27755] IPv6: NLM_F_CREATE should be set when creating new route
[  595.606654][T27770] lo speed is unknown, defaulting to 1000
[  595.708364][T27771] futex_wake_op: syz.9.6831 tries to shift op by 32; fix this program
[  596.004829][T27791] futex_wake_op: syz.9.6840 tries to shift op by 32; fix this program
[  596.471245][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.478736][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.486140][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.493554][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.501036][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.508720][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.516264][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.523709][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.531147][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.538656][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.546071][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.553601][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.561045][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.568449][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.575849][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.583260][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.590679][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.598139][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.605675][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.613074][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.620604][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.628002][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.635374][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.642767][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.650148][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.657556][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.664991][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.672462][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.679876][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.687233][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.693951][T27804] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  596.694605][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.694646][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.715773][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.723166][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.730691][ T6385] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  596.738510][ T6385] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  596.738846][T27803] validate_nla: 7 callbacks suppressed
[  596.738858][T27803] netlink: 'syz.8.6842': attribute type 5 has an invalid length.
[  596.821036][T27814] loop8: detected capacity change from 0 to 512
[  596.922278][T27826] loop4: detected capacity change from 0 to 1024
[  596.940765][T27827] lo speed is unknown, defaulting to 1000
[  596.976979][T27826] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  596.998610][T27823] futex_wake_op: syz.6.6850 tries to shift op by 32; fix this program
[  597.045898][T27833] loop9: detected capacity change from 0 to 1024
[  597.052798][T27833] EXT4-fs: Ignoring removed mblk_io_submit option
[  597.066189][T27826] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.6852: lblock 1 mapped to illegal pblock 1 (length 15)
[  597.103333][T27833] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  597.162459][T27826] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  597.175085][T27826] EXT4-fs (loop4): This should not happen!! Data will be lost
[  597.175085][T27826] 
[  597.267627][T27835] netlink: 'syz.4.6852': attribute type 21 has an invalid length.
[  597.311316][T27835] netlink: 'syz.4.6852': attribute type 1 has an invalid length.
[  597.319119][T27835] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6852'.
[  597.393862][T27841] pim6reg: entered allmulticast mode
[  597.434489][T27835] pim6reg: left allmulticast mode
[  597.786923][T27857] netlink: 'syz.4.6859': attribute type 5 has an invalid length.
[  597.794973][T27857] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  597.933047][T27863] loop6: detected capacity change from 0 to 1024
[  597.939820][T27863] EXT4-fs: Ignoring removed mblk_io_submit option
[  597.946663][T27863] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  598.185750][T27869] loop5: detected capacity change from 0 to 512
[  598.199051][T27869] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6862: Failed to acquire dquot type 1
[  598.211647][T27869] EXT4-fs (loop5): 1 truncate cleaned up
[  598.218485][T27869] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.299518][T27873] loop5: detected capacity change from 0 to 1024
[  598.308411][T27873] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  598.515892][T27879] futex_wake_op: syz.5.6865 tries to shift op by 32; fix this program
[  598.581254][T27884] loop5: detected capacity change from 0 to 512
[  598.695283][T27889] loop8: detected capacity change from 0 to 8192
[  598.755942][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.763376][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.770855][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.778249][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.785725][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.793306][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.800727][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.808187][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.815686][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.823179][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.830691][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.838125][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.845611][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.853029][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.860482][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.867915][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.875450][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.882878][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.890399][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.897821][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.899755][T27900] netlink: 'syz.6.6870': attribute type 5 has an invalid length.
[  598.905218][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.920493][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.927910][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.935304][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.942852][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.950329][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.957749][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.965186][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.972662][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.980075][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.987513][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  598.994945][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  599.002358][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  599.009761][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  599.017280][ T6385] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  599.025340][ T6385] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  599.053124][T27899] lo speed is unknown, defaulting to 1000
[  599.285520][T27917] loop9: detected capacity change from 0 to 1024
[  599.292188][T27917] EXT4-fs: Ignoring removed orlov option
[  599.325759][T27915] futex_wake_op: syz.6.6876 tries to shift op by 32; fix this program
[  599.408102][T27923] 9pnet_fd: Insufficient options for proto=fd
[  599.431385][   T29] kauditd_printk_skb: 125 callbacks suppressed
[  599.431400][   T29] audit: type=1326 audit(1752734432.648:22483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.6.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  599.477530][   T29] audit: type=1326 audit(1752734432.648:22484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.6.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  599.501103][   T29] audit: type=1326 audit(1752734432.648:22485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27924 comm="syz.6.6879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  599.515971][T27931] loop6: detected capacity change from 0 to 164
[  599.536381][T27932] loop9: detected capacity change from 0 to 1024
[  599.543257][T27932] EXT4-fs: Ignoring removed mblk_io_submit option
[  599.551216][T27932] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  599.565875][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.570386][   T29] audit: type=1326 audit(1752734432.778:22486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.5.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36957ae929 code=0x7ffc0000
[  599.573321][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.604307][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.611863][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.619264][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.626712][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.634169][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.641587][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.648990][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.656431][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.659760][   T29] audit: type=1326 audit(1752734432.818:22487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.5.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36957ae929 code=0x7ffc0000
[  599.663820][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.687344][   T29] audit: type=1326 audit(1752734432.818:22488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.5.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f36957ae929 code=0x7ffc0000
[  599.694710][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.718208][   T29] audit: type=1326 audit(1752734432.818:22489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.5.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36957ae929 code=0x7ffc0000
[  599.725521][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.749178][   T29] audit: type=1326 audit(1752734432.818:22490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.5.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36957ae929 code=0x7ffc0000
[  599.756498][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.787793][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.795423][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.802917][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.808984][T27941] loop5: detected capacity change from 0 to 1024
[  599.810473][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.824240][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.827757][T27941] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  599.831633][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.841604][T27934] netlink: 'syz.8.6882': attribute type 5 has an invalid length.
[  599.846923][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.862140][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.870850][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.876770][T27934] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  599.878241][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.892066][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.899524][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.906906][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.914306][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.921800][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.929200][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.936612][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.944105][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.951541][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.958954][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.966340][ T1099] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  599.974973][ T1099] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  600.064564][T27951] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6883'.
[  600.100927][T27950] loop8: detected capacity change from 0 to 1024
[  600.107946][T27950] EXT4-fs: Ignoring removed orlov option
[  600.190092][T27956] lo speed is unknown, defaulting to 1000
[  600.322996][T27956] loop4: detected capacity change from 0 to 1024
[  600.359595][T27956] EXT4-fs: Ignoring removed mblk_io_submit option
[  600.399499][   T29] audit: type=1326 audit(1752734433.618:22491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27959 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  600.423157][   T29] audit: type=1326 audit(1752734433.618:22492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27959 comm="syz.8.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497ec6e929 code=0x7ffc0000
[  600.447847][T27956] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  600.483498][T27960] loop8: detected capacity change from 0 to 1024
[  600.555775][T27966] loop9: detected capacity change from 0 to 512
[  600.646750][T27960] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  600.698120][T27966] EXT4-fs (loop9): orphan cleanup on readonly fs
[  600.705477][T27964] futex_wake_op: syz.5.6890 tries to shift op by 32; fix this program
[  600.730698][T27966] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6892: Failed to acquire dquot type 1
[  600.764576][T27966] EXT4-fs (loop9): 1 truncate cleaned up
[  600.797004][T27960] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6891: lblock 1 mapped to illegal pblock 1 (length 15)
[  600.848929][T27960] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  600.861441][T27960] EXT4-fs (loop8): This should not happen!! Data will be lost
[  600.861441][T27960] 
[  600.879223][T27976] netlink: 'syz.8.6891': attribute type 21 has an invalid length.
[  600.889050][T27976] netlink: 'syz.8.6891': attribute type 1 has an invalid length.
[  600.896783][T27976] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6891'.
[  600.973937][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  600.981400][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  600.988815][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  600.996199][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.003649][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.011102][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.018583][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.026005][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.031895][T27960] pim6reg: entered allmulticast mode
[  601.033398][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.041546][T27960] pim6reg: left allmulticast mode
[  601.046016][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.058505][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.065909][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.073339][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.080799][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.088195][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.095572][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.103033][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.110497][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.118012][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.125390][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.130741][T27982] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  601.132772][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.146731][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.154541][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.161942][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.169341][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.176722][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.184163][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.191551][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.199063][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.206443][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.213969][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.221494][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.228884][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.236326][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.243721][ T3380] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[  601.252569][ T3380] hid-generic 0000:0000:0000.0024: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  601.254155][T27984] netlink: 'syz.5.6895': attribute type 5 has an invalid length.
[  601.319446][T27992] loop9: detected capacity change from 0 to 512
[  601.326199][T27992] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  601.408366][T27992] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6898: bg 0: block 435: padding at end of block bitmap is not set
[  601.429553][T27999] netlink: 'syz.8.6899': attribute type 1 has an invalid length.
[  601.437321][T27999] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6899'.
[  601.461035][T27992] EXT4-fs (loop9): 1 truncate cleaned up
[  601.548777][T28006] loop9: detected capacity change from 0 to 164
[  601.563531][T28004] loop8: detected capacity change from 0 to 512
[  601.578939][T28004] EXT4-fs: Ignoring removed nobh option
[  601.589174][T28004] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  601.600682][T28004] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  601.610787][T28004] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6904: Corrupt directory, running e2fsck is recommended
[  601.704205][T28004] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  601.712997][T28004] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.6904: corrupted in-inode xattr: invalid ea_ino
[  601.749420][T28004] EXT4-fs (loop8): Remounting filesystem read-only
[  601.787059][T28004] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  601.798607][T28004] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  601.808816][T28004] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6904: Corrupt directory, running e2fsck is recommended
[  601.823230][T28012] Unsupported NM flag settings (8)
[  602.126246][T28004] usb usb1: usbfs: process 28004 (syz.8.6904) did not claim interface 0 before use
[  602.136599][T28004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6904'.
[  602.153654][T28004] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  602.165157][T28004] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  602.175351][T28004] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6904: Corrupt directory, running e2fsck is recommended
[  602.342138][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.349623][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.357011][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.364525][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.371925][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.379312][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.386714][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.394118][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.401533][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.408974][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.416344][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.423756][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.431241][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.438634][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.446063][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.453496][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.460884][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.468277][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.475644][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.483045][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.490434][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.497828][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.505271][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.512684][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.520072][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.527444][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.534878][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.542410][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.549808][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.557253][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.565288][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.572898][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.580352][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.587745][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.595193][   T36] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  602.706682][T28019] netlink: 'syz.5.6907': attribute type 5 has an invalid length.
[  602.731728][T28019] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  603.060212][   T36] hid-generic 0000:0000:0000.0025: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  603.094446][T28027] loop9: detected capacity change from 0 to 1024
[  603.113640][T28029] loop5: detected capacity change from 0 to 1024
[  603.118187][T28031] loop8: detected capacity change from 0 to 1024
[  603.134254][T28027] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  603.146310][T28031] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  603.163953][T28027] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.6910: lblock 1 mapped to illegal pblock 1 (length 15)
[  603.167776][T28029] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  603.187321][T28031] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6912: lblock 1 mapped to illegal pblock 1 (length 15)
[  603.205881][T28027] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  603.218265][T28027] EXT4-fs (loop9): This should not happen!! Data will be lost
[  603.218265][T28027] 
[  603.232682][T28037] pim6reg: entered allmulticast mode
[  603.238788][T28031] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  603.239157][T28037] pim6reg: left allmulticast mode
[  603.251207][T28031] EXT4-fs (loop8): This should not happen!! Data will be lost
[  603.251207][T28031] 
[  603.308057][T28027] netlink: 'syz.9.6910': attribute type 21 has an invalid length.
[  603.315928][T28027] netlink: 'syz.9.6910': attribute type 1 has an invalid length.
[  603.323690][T28027] netlink: 144 bytes leftover after parsing attributes in process `syz.9.6910'.
[  603.407709][T28045] netlink: 'syz.8.6914': attribute type 1 has an invalid length.
[  603.415464][T28045] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6914'.
[  603.461559][T28027] pim6reg: entered allmulticast mode
[  603.478359][T28027] pim6reg: left allmulticast mode
[  603.490486][T28047] loop8: detected capacity change from 0 to 1024
[  603.521385][T28047] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  603.572558][T28047] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6916: lblock 1 mapped to illegal pblock 1 (length 15)
[  603.660871][T28051] loop5: detected capacity change from 0 to 1024
[  603.684147][T28053] netlink: 'syz.8.6916': attribute type 21 has an invalid length.
[  603.699653][T28047] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  603.712093][T28047] EXT4-fs (loop8): This should not happen!! Data will be lost
[  603.712093][T28047] 
[  603.728332][T28051] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  603.762906][T28051] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.6918: lblock 1 mapped to illegal pblock 1 (length 15)
[  603.808456][T28053] netlink: 'syz.8.6916': attribute type 1 has an invalid length.
[  603.816200][T28053] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6916'.
[  603.825782][T28063] netlink: 'syz.5.6918': attribute type 21 has an invalid length.
[  603.867570][T28063] netlink: 'syz.5.6918': attribute type 1 has an invalid length.
[  603.875312][T28063] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6918'.
[  603.891685][T28068] pim6reg: entered allmulticast mode
[  603.905928][T28047] pim6reg: entered allmulticast mode
[  603.919597][T28051] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  603.932047][T28051] EXT4-fs (loop5): This should not happen!! Data will be lost
[  603.932047][T28051] 
[  603.938067][T28047] pim6reg: left allmulticast mode
[  603.968962][T28063] pim6reg: left allmulticast mode
[  604.034845][T28076] loop4: detected capacity change from 0 to 1024
[  604.038921][T28076] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.047172][T28076] netlink: 'syz.4.6925': attribute type 21 has an invalid length.
[  604.047200][T28076] netlink: 'syz.4.6925': attribute type 1 has an invalid length.
[  604.047213][T28076] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6925'.
[  604.052338][T28076] pim6reg: entered allmulticast mode
[  604.056745][T28076] pim6reg: left allmulticast mode
[  604.260117][T28083] loop8: detected capacity change from 0 to 512
[  604.276338][T28085] loop5: detected capacity change from 0 to 8192
[  604.283179][T28083] EXT4-fs: Ignoring removed nobh option
[  604.292460][T28083] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  604.304013][T28083] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  604.314149][T28083] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6926: Corrupt directory, running e2fsck is recommended
[  604.330856][T28083] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  604.337446][T28097] loop6: detected capacity change from 0 to 1024
[  604.339383][T28083] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.6926: corrupted in-inode xattr: invalid ea_ino
[  604.359775][T28083] EXT4-fs (loop8): Remounting filesystem read-only
[  604.372367][T28099] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6933'.
[  604.379525][T28083] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  604.392962][T28083] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  604.403053][T28083] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6926: Corrupt directory, running e2fsck is recommended
[  604.431368][T28097] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  604.441202][T28083] usb usb1: usbfs: process 28083 (syz.8.6926) did not claim interface 0 before use
[  604.450948][T28083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6926'.
[  604.465098][T28083] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  604.476718][T28083] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  604.484171][T28097] siw: device registration error -23
[  604.486913][T28083] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6926: Corrupt directory, running e2fsck is recommended
[  604.505415][   T29] kauditd_printk_skb: 350 callbacks suppressed
[  604.505426][   T29] audit: type=1326 audit(1752734437.718:22841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.535235][   T29] audit: type=1326 audit(1752734437.718:22842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.561293][   T29] audit: type=1326 audit(1752734437.778:22843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.584848][   T29] audit: type=1326 audit(1752734437.778:22844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.608475][   T29] audit: type=1326 audit(1752734437.778:22845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.632054][   T29] audit: type=1326 audit(1752734437.778:22846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.655661][   T29] audit: type=1326 audit(1752734437.778:22847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.679233][   T29] audit: type=1326 audit(1752734437.778:22848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.690524][T28112] loop9: detected capacity change from 0 to 1024
[  604.702782][   T29] audit: type=1326 audit(1752734437.778:22849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.732761][   T29] audit: type=1326 audit(1752734437.778:22850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28104 comm="syz.4.6935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  604.761455][T28112] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.776023][T28111] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.6938: lblock 1 mapped to illegal pblock 1 (length 15)
[  604.791601][T28111] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  604.804007][T28111] EXT4-fs (loop9): This should not happen!! Data will be lost
[  604.804007][T28111] 
[  604.814970][T28111] netlink: 144 bytes leftover after parsing attributes in process `syz.9.6938'.
[  604.829082][T28111] pim6reg: entered allmulticast mode
[  604.835656][T28111] pim6reg: left allmulticast mode
[  604.872194][T28121] futex_wake_op: syz.8.6939 tries to shift op by 32; fix this program
[  605.076372][T28138] loop9: detected capacity change from 0 to 1024
[  605.083134][T28138] EXT4-fs: Ignoring removed mblk_io_submit option
[  605.090650][T28138] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  605.375198][T28151] lo speed is unknown, defaulting to 1000
[  605.415730][T28145] futex_wake_op: syz.5.6947 tries to shift op by 32; fix this program
[  605.455142][T28155] loop4: detected capacity change from 0 to 512
[  605.500415][T28155] EXT4-fs: Ignoring removed nobh option
[  605.529752][T28155] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  605.541306][T28155] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  605.551398][T28155] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6950: Corrupt directory, running e2fsck is recommended
[  605.636817][T28155] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  605.659704][T28155] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.6950: corrupted in-inode xattr: invalid ea_ino
[  605.743060][T28159] loop8: detected capacity change from 0 to 512
[  605.756135][T28155] EXT4-fs (loop4): Remounting filesystem read-only
[  605.792044][T28159] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  605.849866][T28153] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  605.861527][T28153] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  605.871641][T28153] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6950: Corrupt directory, running e2fsck is recommended
[  605.897422][T28159] EXT4-fs (loop8): 1 truncate cleaned up
[  605.905498][T28162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  605.912749][T28162] IPv6: NLM_F_CREATE should be set when creating new route
[  605.959511][T28155] usb usb1: usbfs: process 28155 (syz.4.6950) did not claim interface 0 before use
[  605.981155][T28153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6950'.
[  605.991756][T28166] loop8: detected capacity change from 0 to 512
[  606.003671][T28166] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  606.017406][T28153] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  606.029095][T28153] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  606.039281][T28153] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6950: Corrupt directory, running e2fsck is recommended
[  606.054368][T28166] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6953: bg 0: block 435: padding at end of block bitmap is not set
[  606.069876][T28166] EXT4-fs (loop8): 1 truncate cleaned up
[  606.166568][T28175] loop6: detected capacity change from 0 to 1024
[  606.219582][T28179] loop4: detected capacity change from 0 to 512
[  606.239403][T28175] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  606.249433][T28181] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.315314][T28175] siw: device registration error -23
[  606.409510][T28181] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.460734][T28195] loop6: detected capacity change from 0 to 1024
[  606.485773][T28181] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.507658][T28195] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  606.536869][T28195] siw: device registration error -23
[  606.570533][T28181] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.633364][T28181] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  606.645873][T28181] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  606.660287][T28181] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  606.681619][T28181] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  606.759160][T28221] lo speed is unknown, defaulting to 1000
[  606.850126][T28224] loop6: detected capacity change from 0 to 1024
[  606.856811][T28224] EXT4-fs: Ignoring removed mblk_io_submit option
[  606.922278][T28224] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  607.010337][T28229] loop5: detected capacity change from 0 to 1024
[  607.041177][T28229] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  607.256083][T28221] loop9: detected capacity change from 0 to 1024
[  607.297177][T28234] loop8: detected capacity change from 0 to 1024
[  607.315063][T28221] EXT4-fs: Ignoring removed mblk_io_submit option
[  607.350026][T28221] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  607.375059][T28234] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.412994][T28236] loop5: detected capacity change from 0 to 1024
[  607.424385][T28232] loop4: detected capacity change from 0 to 1024
[  607.436271][T28234] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6981'.
[  607.489800][T28236] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.512503][T28232] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.536411][T28234] pim6reg: entered allmulticast mode
[  607.553214][T28236] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.6982: lblock 1 mapped to illegal pblock 1 (length 15)
[  607.627414][T28245] pim6reg: entered allmulticast mode
[  607.633733][T28245] pim6reg: left allmulticast mode
[  607.668669][T28236] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  607.681286][T28236] EXT4-fs (loop5): This should not happen!! Data will be lost
[  607.681286][T28236] 
[  607.692756][T28234] pim6reg: left allmulticast mode
[  607.708776][T28246] validate_nla: 7 callbacks suppressed
[  607.708789][T28246] netlink: 'syz.4.6980': attribute type 21 has an invalid length.
[  607.825841][T28232] pim6reg: entered allmulticast mode
[  607.889339][T28249] pim6reg: left allmulticast mode
[  607.920951][T28246] netlink: 'syz.4.6980': attribute type 1 has an invalid length.
[  608.460538][T28257] loop4: detected capacity change from 0 to 1024
[  608.491065][T28260] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.523737][T28261] loop8: detected capacity change from 0 to 512
[  608.530479][T28270] loop6: detected capacity change from 0 to 512
[  608.530948][T28257] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  608.557327][T28261] EXT4-fs (loop8): orphan cleanup on readonly fs
[  608.568583][T28261] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6988: Failed to acquire dquot type 1
[  608.589007][T28260] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.602043][T28257] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.6985: lblock 1 mapped to illegal pblock 1 (length 15)
[  608.618939][T28261] EXT4-fs (loop8): 1 truncate cleaned up
[  608.639941][T28257] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  608.652362][T28257] EXT4-fs (loop4): This should not happen!! Data will be lost
[  608.652362][T28257] 
[  608.668966][T28260] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.720310][T28278] netlink: 'syz.4.6985': attribute type 21 has an invalid length.
[  608.741902][T28260] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.762807][T28278] netlink: 'syz.4.6985': attribute type 1 has an invalid length.
[  608.770684][T28278] __nla_validate_parse: 2 callbacks suppressed
[  608.770717][T28278] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6985'.
[  608.830113][T28280] futex_wake_op: syz.8.6991 tries to shift op by 32; fix this program
[  608.847024][T28257] pim6reg: entered allmulticast mode
[  608.855992][T28257] pim6reg: left allmulticast mode
[  609.150132][T28284] loop8: detected capacity change from 0 to 1024
[  609.188957][T28284] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  609.218639][T28284] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.6993: lblock 1 mapped to illegal pblock 1 (length 15)
[  609.258520][T28284] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  609.270969][T28284] EXT4-fs (loop8): This should not happen!! Data will be lost
[  609.270969][T28284] 
[  609.281682][T28290] loop4: detected capacity change from 0 to 8192
[  609.292745][T28284] pim6reg: entered allmulticast mode
[  609.301374][T28284] pim6reg: left allmulticast mode
[  609.523580][T28295] loop8: detected capacity change from 0 to 8192
[  609.599563][T28295] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  609.650202][T28301] netlink: 'syz.8.6998': attribute type 1 has an invalid length.
[  609.658133][T28301] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6998'.
[  609.712256][   T29] kauditd_printk_skb: 425 callbacks suppressed
[  609.712270][   T29] audit: type=1326 audit(1752734442.928:23274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.743686][   T29] audit: type=1326 audit(1752734442.958:23275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.767273][   T29] audit: type=1326 audit(1752734442.958:23276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.790905][   T29] audit: type=1326 audit(1752734442.958:23277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.814386][   T29] audit: type=1326 audit(1752734442.958:23278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.837951][   T29] audit: type=1326 audit(1752734442.958:23279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.861422][   T29] audit: type=1326 audit(1752734442.958:23280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.885072][   T29] audit: type=1326 audit(1752734442.958:23281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.902222][T28311] futex_wake_op: syz.8.7003 tries to shift op by 32; fix this program
[  609.908572][   T29] audit: type=1326 audit(1752734442.958:23282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  609.940280][   T29] audit: type=1326 audit(1752734442.958:23283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28306 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0097e9e929 code=0x7ffc0000
[  610.192049][T28324] loop4: detected capacity change from 0 to 512
[  610.202317][T28324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  610.224966][T28324] EXT4-fs (loop4): 1 truncate cleaned up
[  610.272846][T28338] netlink: 'syz.4.7013': attribute type 1 has an invalid length.
[  610.279841][T28340] loop8: detected capacity change from 0 to 1024
[  610.280664][T28338] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7013'.
[  610.297664][T28340] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  610.325396][T28340] siw: device registration error -23
[  610.377651][T28347] loop8: detected capacity change from 0 to 8192
[  610.475760][T28350] futex_wake_op: syz.4.7018 tries to shift op by 32; fix this program
[  610.562993][T28358] loop4: detected capacity change from 0 to 1024
[  610.580180][T28358] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  610.594091][T28358] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.7020: lblock 1 mapped to illegal pblock 1 (length 15)
[  610.608597][T28358] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  610.621027][T28358] EXT4-fs (loop4): This should not happen!! Data will be lost
[  610.621027][T28358] 
[  610.635286][T28358] netlink: 'syz.4.7020': attribute type 21 has an invalid length.
[  610.643219][T28358] netlink: 'syz.4.7020': attribute type 1 has an invalid length.
[  610.651028][T28358] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7020'.
[  610.665372][T28358] pim6reg: entered allmulticast mode
[  610.672077][T28358] pim6reg: left allmulticast mode
[  610.804361][T28374] netlink: 'syz.4.7025': attribute type 1 has an invalid length.
[  610.812226][T28374] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7025'.
[  610.854151][T28378] loop4: detected capacity change from 0 to 1024
[  610.868695][T28378] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  610.895430][T28378] siw: device registration error -23
[  611.027746][T28390] futex_wake_op: syz.9.7029 tries to shift op by 32; fix this program
[  611.122333][T28260] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.133056][T28260] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.143579][T28260] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.154208][T28260] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.183139][T28399] loop5: detected capacity change from 0 to 1024
[  611.200654][T28399] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  611.214240][T28405] netlink: 'syz.8.7037': attribute type 1 has an invalid length.
[  611.218905][T28399] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.7035: lblock 1 mapped to illegal pblock 1 (length 15)
[  611.222009][T28405] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7037'.
[  611.246603][T28399] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  611.259088][T28399] EXT4-fs (loop5): This should not happen!! Data will be lost
[  611.259088][T28399] 
[  611.274171][T28399] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7035'.
[  611.293872][T28399] pim6reg: entered allmulticast mode
[  611.300497][T28399] pim6reg: left allmulticast mode
[  611.348579][T28420] loop9: detected capacity change from 0 to 1024
[  611.361091][T28420] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  611.375246][T28420] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.7044: lblock 1 mapped to illegal pblock 1 (length 15)
[  611.393209][T28420] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  611.405605][T28420] EXT4-fs (loop9): This should not happen!! Data will be lost
[  611.405605][T28420] 
[  611.419704][T28420] netlink: 144 bytes leftover after parsing attributes in process `syz.9.7044'.
[  611.435921][T28425] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.451382][T28420] pim6reg: entered allmulticast mode
[  611.458291][T28420] pim6reg: left allmulticast mode
[  611.469030][T28425] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.529967][T28425] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.535367][T28431] loop6: detected capacity change from 0 to 512
[  611.546864][T28431] EXT4-fs: Ignoring removed nobh option
[  611.555153][T28431] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  611.566715][T28431] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  611.576835][T28431] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7047: Corrupt directory, running e2fsck is recommended
[  611.591789][T28431] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  611.600432][T28431] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.7047: corrupted in-inode xattr: invalid ea_ino
[  611.615106][T28431] EXT4-fs (loop6): Remounting filesystem read-only
[  611.627383][T28431] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  611.638988][T28431] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  611.649081][T28431] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7047: Corrupt directory, running e2fsck is recommended
[  611.653787][T28440] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7050'.
[  611.672855][T28425] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.695962][T28431] usb usb1: usbfs: process 28431 (syz.6.7047) did not claim interface 0 before use
[  611.716743][T28442] loop8: detected capacity change from 0 to 1024
[  611.723642][T28442] EXT4-fs: Ignoring removed mblk_io_submit option
[  611.730636][T28442] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  611.748064][T28431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7047'.
[  611.819267][T28431] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  611.830894][T28431] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  611.841086][T28431] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7047: Corrupt directory, running e2fsck is recommended
[  612.015605][T28452] loop4: detected capacity change from 0 to 512
[  612.058311][T28452] EXT4-fs (loop4): orphan cleanup on readonly fs
[  612.094772][T28452] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7054: Failed to acquire dquot type 1
[  612.163108][T28452] EXT4-fs (loop4): 1 truncate cleaned up
[  612.672896][T28470] loop6: detected capacity change from 0 to 1024
[  612.699915][T28470] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  612.727981][T28470] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm syz.6.7059: lblock 1 mapped to illegal pblock 1 (length 15)
[  612.753210][T28472] loop4: detected capacity change from 0 to 8192
[  612.760443][T28470] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  612.772823][T28470] EXT4-fs (loop6): This should not happen!! Data will be lost
[  612.772823][T28470] 
[  612.800736][T28472] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  612.808915][T28475] validate_nla: 5 callbacks suppressed
[  612.808929][T28475] netlink: 'syz.6.7059': attribute type 21 has an invalid length.
[  612.824159][T28475] netlink: 'syz.6.7059': attribute type 1 has an invalid length.
[  612.843531][T28470] pim6reg: entered allmulticast mode
[  612.851457][T28470] pim6reg: left allmulticast mode
[  613.073431][T28494] loop9: detected capacity change from 0 to 1024
[  613.100360][T28494] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  613.114560][T28494] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.7069: lblock 1 mapped to illegal pblock 1 (length 15)
[  613.130600][T28494] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  613.143138][T28494] EXT4-fs (loop9): This should not happen!! Data will be lost
[  613.143138][T28494] 
[  613.159153][T28494] netlink: 'syz.9.7069': attribute type 21 has an invalid length.
[  613.167194][T28494] netlink: 'syz.9.7069': attribute type 1 has an invalid length.
[  613.180951][T28494] pim6reg: entered allmulticast mode
[  613.188075][T28494] pim6reg: left allmulticast mode
[  613.270010][T28504] loop8: detected capacity change from 0 to 8192
[  613.308962][T28504] tipc: Enabling of bearer <udp:£> rejected, already enabled
[  613.352521][T28517] loop8: detected capacity change from 0 to 1024
[  613.352838][T28517] EXT4-fs: Ignoring removed orlov option
[  613.610201][T28527] loop8: detected capacity change from 0 to 1024
[  613.617128][T28527] EXT4-fs: Ignoring removed mblk_io_submit option
[  613.624451][T28527] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  613.750202][T28533] loop9: detected capacity change from 0 to 164
[  614.010537][T28537] loop4: detected capacity change from 0 to 1024
[  614.035402][T28537] EXT4-fs: Ignoring removed orlov option
[  614.260804][T28541] __nla_validate_parse: 2 callbacks suppressed
[  614.260821][T28541] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7080'.
[  614.487347][T28546] lo speed is unknown, defaulting to 1000
[  614.585007][T28550] loop4: detected capacity change from 0 to 1024
[  614.608921][T28550] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  614.635384][T28550] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.7086: lblock 1 mapped to illegal pblock 1 (length 15)
[  614.669192][T28550] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  614.681577][T28550] EXT4-fs (loop4): This should not happen!! Data will be lost
[  614.681577][T28550] 
[  614.716398][T28553] netlink: 'syz.4.7086': attribute type 21 has an invalid length.
[  614.737669][   T29] kauditd_printk_skb: 549 callbacks suppressed
[  614.737680][   T29] audit: type=1326 audit(1752734447.948:23831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.783805][T28550] pim6reg: entered allmulticast mode
[  614.797588][T28553] netlink: 'syz.4.7086': attribute type 1 has an invalid length.
[  614.805359][T28553] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7086'.
[  614.819864][   T29] audit: type=1326 audit(1752734447.988:23832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.843497][   T29] audit: type=1326 audit(1752734447.988:23833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.867081][   T29] audit: type=1326 audit(1752734447.988:23834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.890665][   T29] audit: type=1326 audit(1752734447.998:23835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.914086][   T29] audit: type=1326 audit(1752734447.998:23836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.937632][   T29] audit: type=1326 audit(1752734447.998:23837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.961179][   T29] audit: type=1326 audit(1752734447.998:23838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  614.984747][   T29] audit: type=1326 audit(1752734447.998:23839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  615.008320][   T29] audit: type=1326 audit(1752734447.998:23840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  615.021929][T28550] pim6reg: left allmulticast mode
[  615.530445][T28586] loop4: detected capacity change from 0 to 1024
[  615.549943][T28586] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  615.564333][T28586] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.7098: lblock 1 mapped to illegal pblock 1 (length 15)
[  615.581027][T28586] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  615.593461][T28586] EXT4-fs (loop4): This should not happen!! Data will be lost
[  615.593461][T28586] 
[  615.606198][T28586] netlink: 'syz.4.7098': attribute type 21 has an invalid length.
[  615.614189][T28586] netlink: 'syz.4.7098': attribute type 1 has an invalid length.
[  615.621940][T28586] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7098'.
[  615.637777][T28586] pim6reg: entered allmulticast mode
[  615.644674][T28586] pim6reg: left allmulticast mode
[  615.932117][T28598] loop4: detected capacity change from 0 to 1024
[  615.960028][T28598] EXT4-fs mount: 96 callbacks suppressed
[  615.960043][T28598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.978774][T28598] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  615.991978][T28598] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.7102: lblock 1 mapped to illegal pblock 1 (length 15)
[  616.007141][T28598] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  616.019522][T28598] EXT4-fs (loop4): This should not happen!! Data will be lost
[  616.019522][T28598] 
[  616.031176][T28598] netlink: 'syz.4.7102': attribute type 21 has an invalid length.
[  616.039941][T28598] netlink: 'syz.4.7102': attribute type 1 has an invalid length.
[  616.047726][T28598] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7102'.
[  616.062930][T28598] pim6reg: entered allmulticast mode
[  616.069450][T28598] pim6reg: left allmulticast mode
[  616.080390][T28602] loop9: detected capacity change from 0 to 512
[  616.088119][T28602] EXT4-fs (loop9): orphan cleanup on readonly fs
[  616.094808][T28602] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7103: Failed to acquire dquot type 1
[  616.107341][T28602] EXT4-fs (loop9): 1 truncate cleaned up
[  616.113972][T28602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  616.140579][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.160896][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.179648][T28608] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7104'.
[  616.194146][T28610] loop9: detected capacity change from 0 to 1024
[  616.201706][T28610] EXT4-fs: Ignoring removed orlov option
[  616.228726][T28610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.295203][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.345628][T28627] loop9: detected capacity change from 0 to 1024
[  616.407152][T28627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.407212][T28627] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.411588][T28627] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.7110: lblock 1 mapped to illegal pblock 1 (length 15)
[  616.411890][T28627] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  616.411994][T28627] EXT4-fs (loop9): This should not happen!! Data will be lost
[  616.411994][T28627] 
[  616.413678][T28627] netlink: 144 bytes leftover after parsing attributes in process `syz.9.7110'.
[  616.419150][T28627] pim6reg: entered allmulticast mode
[  616.420463][T28627] pim6reg: left allmulticast mode
[  616.593936][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.625816][T28642] loop8: detected capacity change from 0 to 512
[  616.705746][T28648] loop6: detected capacity change from 0 to 1024
[  616.759500][T28648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.778527][T28648] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.804619][T28648] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm syz.6.7116: lblock 1 mapped to illegal pblock 1 (length 15)
[  616.827233][T28648] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  616.839624][T28648] EXT4-fs (loop6): This should not happen!! Data will be lost
[  616.839624][T28648] 
[  616.852031][T28648] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7116'.
[  616.865954][T28648] pim6reg: entered allmulticast mode
[  616.878133][T28648] pim6reg: left allmulticast mode
[  616.989370][T26723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.006643][T28425] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.025469][T28425] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.045640][T28425] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.071056][T28658] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7118'.
[  617.075815][T28425] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.150999][T28662] loop6: detected capacity change from 0 to 1024
[  617.157741][T28664] loop4: detected capacity change from 0 to 512
[  617.159398][T28662] EXT4-fs: Ignoring removed orlov option
[  617.173521][T28664] EXT4-fs (loop4): orphan cleanup on readonly fs
[  617.183852][T28662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.197105][T28664] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7119: Failed to acquire dquot type 1
[  617.242292][T26723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.253946][T28664] EXT4-fs (loop4): 1 truncate cleaned up
[  617.264635][T28664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  617.318542][T25356] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.335427][T28675] loop6: detected capacity change from 0 to 8192
[  617.353106][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.360562][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.367990][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.375368][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.382866][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.390430][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.397916][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.405284][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.412715][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.412951][T28680] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  617.420142][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.433889][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.441313][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.448801][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.456252][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.463663][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.471085][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.478482][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.485864][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.493325][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.500752][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.508205][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.515586][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.523003][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.530405][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.537863][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.537890][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.537916][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.537957][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.537977][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.537996][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.538020][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.538054][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.538094][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.538119][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.538145][T23705] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  617.540425][T23705] hid-generic 0000:0000:0000.0026: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  617.674000][T28686] loop5: detected capacity change from 0 to 1024
[  617.722260][T28686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.754649][T28686] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.780178][T28686] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.7128: lblock 1 mapped to illegal pblock 1 (length 15)
[  617.795784][T28686] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  617.808275][T28686] EXT4-fs (loop5): This should not happen!! Data will be lost
[  617.808275][T28686] 
[  617.868653][T28686] validate_nla: 7 callbacks suppressed
[  617.868666][T28686] netlink: 'syz.5.7128': attribute type 21 has an invalid length.
[  617.882113][T28686] netlink: 'syz.5.7128': attribute type 1 has an invalid length.
[  617.889904][T28686] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7128'.
[  617.904178][T28686] pim6reg: entered allmulticast mode
[  617.910666][T28686] pim6reg: left allmulticast mode
[  617.964968][T28703] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.989297][T28705] netlink: 'syz.8.7132': attribute type 1 has an invalid length.
[  617.989819][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.997131][T28705] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7132'.
[  618.024873][T28707] loop5: detected capacity change from 0 to 164
[  618.061293][T28703] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.129077][T28703] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.213391][T28715] loop6: detected capacity change from 0 to 512
[  618.221710][T28716] Unsupported NM flag settings (8)
[  618.269031][T28703] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.338637][T28703] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.355122][T28703] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.443757][T28703] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.519285][T28703] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.795869][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.803341][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.810804][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.818278][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.825649][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.833032][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.840425][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.847816][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.855195][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.862570][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.869953][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.877379][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.884824][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.892241][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.899665][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.907036][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.914461][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.921839][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.929302][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.936729][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.944146][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.951547][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.958979][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.966361][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.973758][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.981148][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.988551][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  618.995960][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.003545][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.010938][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.018437][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.025807][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.033220][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.040681][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.048086][ T3387] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  619.208271][T28729] netlink: 'syz.4.7139': attribute type 5 has an invalid length.
[  619.237126][T28729] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  619.260301][T28732] loop8: detected capacity change from 0 to 1024
[  619.385016][T28732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.420193][T28732] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  619.452958][T28732] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm syz.8.7141: lblock 1 mapped to illegal pblock 1 (length 15)
[  619.493983][ T3387] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  619.510679][T28748] loop9: detected capacity change from 0 to 512
[  619.520437][T28732] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  619.532973][T28732] EXT4-fs (loop8): This should not happen!! Data will be lost
[  619.532973][T28732] 
[  619.539616][T28749] netlink: 'syz.8.7141': attribute type 21 has an invalid length.
[  619.542880][T28748] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  619.561500][T28749] netlink: 'syz.8.7141': attribute type 1 has an invalid length.
[  619.569297][T28749] netlink: 144 bytes leftover after parsing attributes in process `syz.8.7141'.
[  619.586029][T28732] pim6reg: entered allmulticast mode
[  619.596253][T28753] loop5: detected capacity change from 0 to 1024
[  619.602930][T28753] EXT4-fs: Ignoring removed mblk_io_submit option
[  619.609794][T28748] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7145: bg 0: block 435: padding at end of block bitmap is not set
[  619.624370][T28753] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  619.638812][T28749] pim6reg: left allmulticast mode
[  619.648642][T28748] EXT4-fs (loop9): 1 truncate cleaned up
[  619.654651][T28748] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.669390][T28753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.684374][T28755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  619.691638][T28755] IPv6: NLM_F_CREATE should be set when creating new route
[  619.730617][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.738069][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.745477][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.752994][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.760550][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.767976][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.775431][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.782830][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.790248][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.797639][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.805123][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.812541][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.819931][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.827312][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.834708][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.842128][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.849185][T28761] netlink: 'syz.4.7148': attribute type 5 has an invalid length.
[  619.849513][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.857995][T28761] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  619.864593][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.878279][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.885678][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.893135][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.900910][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.908387][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.915764][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.923168][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.930556][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.938036][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.945477][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.952869][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.960258][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.967701][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.975072][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.982479][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.990022][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  619.997526][ T3387] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  620.007526][T23444] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.016981][ T3387] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v8.00 Device [syz1] on syz0
[  620.027550][T20360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.098992][T28764] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.141346][   T29] kauditd_printk_skb: 430 callbacks suppressed
[  620.141409][   T29] audit: type=1326 audit(1752734453.358:24267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.4.7152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  620.171710][   T29] audit: type=1326 audit(1752734453.358:24268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.4.7152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  620.195308][   T29] audit: type=1326 audit(1752734453.358:24269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.4.7152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  620.219116][T28778] loop8: detected capacity change from 0 to 164
[  620.219224][   T29] ==================================================================
[  620.233436][   T29] BUG: KCSAN: data-race in data_alloc / prb_reserve
[  620.240036][   T29] 
[  620.242346][   T29] write to 0xffffffff8688ae38 of 8 bytes by task 28778 on cpu 1:
[  620.250055][   T29]  data_alloc+0x27d/0x2b0
[  620.254396][   T29]  prb_reserve+0x808/0xaf0
[  620.258814][   T29]  vprintk_store+0x56d/0x860
[  620.263389][   T29]  vprintk_emit+0x178/0x650
[  620.267881][   T29]  vprintk_default+0x26/0x30
[  620.272467][   T29]  vprintk+0x1d/0x30
[  620.276359][   T29]  _printk+0x79/0xa0
[  620.280255][   T29]  set_capacity_and_notify+0x14c/0x1f0
[  620.285715][   T29]  loop_set_size+0x2e/0x70
[  620.290131][   T29]  loop_configure+0x8d3/0xa50
[  620.294808][   T29]  lo_ioctl+0x559/0x15d0
[  620.299047][   T29]  blkdev_ioctl+0x34f/0x440
[  620.303546][   T29]  __se_sys_ioctl+0xcb/0x140
[  620.308132][   T29]  __x64_sys_ioctl+0x43/0x50
[  620.312719][   T29]  x64_sys_call+0x19a8/0x2fb0
[  620.317390][   T29]  do_syscall_64+0xd2/0x200
[  620.321883][   T29]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.327765][   T29] 
[  620.330077][   T29] read to 0xffffffff8688ae38 of 8 bytes by task 29 on cpu 0:
[  620.337434][   T29]  prb_reserve+0x221/0xaf0
[  620.341855][   T29]  vprintk_store+0x56d/0x860
[  620.346434][   T29]  vprintk_emit+0x178/0x650
[  620.350924][   T29]  vprintk_default+0x26/0x30
[  620.355505][   T29]  vprintk+0x1d/0x30
[  620.359395][   T29]  _printk+0x79/0xa0
[  620.363284][   T29]  kauditd_hold_skb+0x1b1/0x1c0
[  620.368120][   T29]  kauditd_send_queue+0x273/0x2c0
[  620.373128][   T29]  kauditd_thread+0x421/0x630
[  620.377803][   T29]  kthread+0x489/0x510
[  620.381861][   T29]  ret_from_fork+0xda/0x150
[  620.386352][   T29]  ret_from_fork_asm+0x1a/0x30
[  620.391106][   T29] 
[  620.393414][   T29] value changed: 0x00000000000dcbd0 -> 0x000000000018cd28
[  620.400506][   T29] 
[  620.402813][   T29] Reported by Kernel Concurrency Sanitizer on:
[  620.408949][   T29] CPU: 0 UID: 0 PID: 29 Comm: kauditd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) 
[  620.420913][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  620.430955][   T29] ==================================================================
[  620.219088][   T29] audit: type=1326 audit(1752734453.358:24270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28773 comm="syz.4.7152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ae26e929 code=0x7ffc0000
[  620.462928][   T29] audit: type=1326 audit(1752734453.368:24271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28763 comm="syz.9.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0efc4e929 code=0x7ffc0000
[  620.486570][   T29] audit: type=1326 audit(1752734453.368:24272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28763 comm="syz.9.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0efc4e929 code=0x7ffc0000
[  620.510225][   T29] audit: type=1326 audit(1752734453.368:24273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28763 comm="syz.9.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0efc4e929 code=0x7ffc0000
[  620.533858][   T29] audit: type=1326 audit(1752734453.368:24274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28763 comm="syz.9.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0efc4e929 code=0x7ffc0000
[  620.557436][   T29] audit: type=1326 audit(1752734453.368:24275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28763 comm="syz.9.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd0efc4e929 code=0x7ffc0000
[  620.581004][   T29] audit: type=1326 audit(1752734453.368:24276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28763 comm="syz.9.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0efc4e929 code=0x7ffc0000
[  620.695727][T26487] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.696076][T28764] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.738456][T28764] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.790099][T28764] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.839699][T28787] Unsupported NM flag settings (8)
[  620.859547][T28764] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.874311][T28764] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.903038][T28764] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.920578][T28764] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0