last executing test programs:

7m8.74886221s ago: executing program 1 (id=228):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x8000}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

7m8.467119724s ago: executing program 1 (id=231):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
close(r2)

7m8.419095905s ago: executing program 1 (id=232):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
close(r2)

7m8.378701516s ago: executing program 1 (id=233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
creat(&(0x7f0000000980)='./bus\x00', 0x19)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

7m8.178627528s ago: executing program 1 (id=236):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xc7f}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="a58bc94ae742e11df77c3c9fa95307503f0f5e54", 0x14}, {&(0x7f00000007c0)="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", 0x6ad}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00010000"], 0x38, 0x2000c034}}], 0x2, 0x2008c044)

7m8.038832771s ago: executing program 1 (id=239):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
close(r0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x812418, 0x0, 0xff, 0x0, &(0x7f00000007c0))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0)
connect$pppl2tp(r3, &(0x7f0000000dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x4, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x6}}}, 0x3a)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
io_uring_enter(r6, 0x6e2, 0x600, 0x1, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x6}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000003181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r10}, './file0\x00'})

6m52.952406952s ago: executing program 32 (id=239):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
close(r0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x812418, 0x0, 0xff, 0x0, &(0x7f00000007c0))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080, 0x0)
connect$pppl2tp(r3, &(0x7f0000000dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x4, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x6}}}, 0x3a)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
io_uring_enter(r6, 0x6e2, 0x600, 0x1, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x6}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000003181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r10}, './file0\x00'})

6.869695459s ago: executing program 3 (id=5634):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xfffffffffffffffe, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f4ff000099b83f8c868604000000060000000c00000000008000", @ANYRES32, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/25], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x3}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0)
mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
close(r13)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$unix(r13, &(0x7f0000000440)={0x0, 0x35, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r15], 0x18}, 0x0)
close(r14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6.77555826s ago: executing program 3 (id=5635):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
creat(&(0x7f0000000800)='./file0\x00', 0x10)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0)

6.672866202s ago: executing program 3 (id=5638):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6, 0x1, 0x2}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r9], 0x14}, {0x0}, {0x0, 0x25c}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000000000100000009000000000000000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r5], 0x50, 0x24040094}, 0x80)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8)
r10 = getegid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES64=r1, @ANYBLOB="02000000", @ANYRES8=r6, @ANYBLOB="02000300", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)

6.613037833s ago: executing program 3 (id=5639):
r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18)
syz_clone(0x6200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&')

6.394853176s ago: executing program 3 (id=5644):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2}, 0x18)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

6.347426717s ago: executing program 3 (id=5645):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
readahead(0xffffffffffffffff, 0x6, 0x80000000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000008000000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
creat(&(0x7f0000000800)='./file0\x00', 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=@known='system.advise\x00', &(0x7f0000000700)=""/213, 0xd5)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r8=>0x0})
bind$can_raw(r6, &(0x7f0000000200)={0x1d, r8}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x11, &(0x7f0000000480)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@norecovery}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@jqfmt_vfsv1}]}, 0x0, 0x611, &(0x7f0000000ac0)="$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")

3.131975554s ago: executing program 4 (id=5674):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0)

2.638493321s ago: executing program 4 (id=5679):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = syz_open_pts(r5, 0x141601)
ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000040)={0x20000001, 0xffffff94, 0x20000096, 0x5495cb6e, 0x4, "0000008000", 0x0, 0xff})
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r7 = socket(0xa, 0x3, 0x3a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x50, 0x1, 0x5, 0x1, 0x1, 0xfff}}, {0x4}}, {{0x1c, 0x1, {0x30, 0x9, 0x0, 0xfffffffb, 0x1, 0xf, 0x7fffffff, 0x3}}, {0xa, 0x2, [0xfff8, 0x9, 0x9]}}, {{0x1c, 0x1, {0x9, 0x5, 0x7e2, 0x3, 0x1, 0xfffffcd1, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x94}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4c084)
fcntl$setstatus(r6, 0x4, 0x102800)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x60000480)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)

1.669604095s ago: executing program 0 (id=5681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendto$inet6(r1, &(0x7f0000000840)='*', 0x1, 0x3b00, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffffe}]}, 0x24}}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r6=>0x0})
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0xb, r6, 0x31}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000007208000000", 0x18)

1.411719999s ago: executing program 0 (id=5685):
shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000002}, 0x18)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8)

1.240075531s ago: executing program 0 (id=5688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (fail_nth: 1)

946.517526ms ago: executing program 5 (id=5691):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1, @empty, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f00000002c0)=0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="f7ffffff", @ANYRES16=r5, @ANYBLOB="df4800000000000000010c00000004000380180001801400020064756d6d793000"/42], 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4ab}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000020605000000000000000000e6ff00000c00078008001240220007620900020073797a32000000000500040003000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20040442)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
shutdown(r0, 0x1)

764.803419ms ago: executing program 4 (id=5692):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

683.640829ms ago: executing program 4 (id=5694):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
readahead(0xffffffffffffffff, 0x6, 0x80000000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000008000000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
creat(&(0x7f0000000800)='./file0\x00', 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=@known='system.advise\x00', &(0x7f0000000700)=""/213, 0xd5)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r8=>0x0})
bind$can_raw(r6, &(0x7f0000000200)={0x1d, r8}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x11, &(0x7f0000000480)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@norecovery}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@jqfmt_vfsv1}]}, 0x0, 0x611, &(0x7f0000000ac0)="$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")

639.00981ms ago: executing program 5 (id=5695):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000540)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8090)
close_range(r0, 0xffffffffffffffff, 0x0)

594.427191ms ago: executing program 2 (id=5696):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=@known='system.advise\x00', &(0x7f0000000700)=""/213, 0xd5)

533.644082ms ago: executing program 5 (id=5697):
r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, 0x0, 0x0, 0x1)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xffffffffffffffa1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x100)
r12 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), &(0x7f0000000680), &(0x7f0000000640), {0x20}, &(0x7f0000000940)=""/36, 0x24, &(0x7f00000006c0)=""/93, 0x0, 0x0, {r8}}, 0x58)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000800)={<r13=>0x0}, &(0x7f0000000840)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x0, r9, 0x0, r10, r11, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r12, r13, 0x6})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = getpgid(0x0)
process_vm_writev(r15, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000001140)=[{&(0x7f0000000200)=""/142, 0x8e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r16=>0x0})
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, 0x0, r11, r14, 0x0, 0x69, 0x3}, 0x5, 0x3, 0x5ab9fe46, 0x6, r15, r16, 0x3})
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

533.128872ms ago: executing program 2 (id=5698):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
lgetxattr(0x0, &(0x7f0000000340)=@known='system.advise\x00', 0x0, 0x0)

430.631803ms ago: executing program 2 (id=5699):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0xfffd, 0x0, {0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

383.015454ms ago: executing program 0 (id=5700):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
memfd_create(0x0, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})

372.859554ms ago: executing program 2 (id=5701):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x80, 0x400, 0x2de})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
clock_nanosleep(0xfcfdffff, 0x1, &(0x7f0000000040), 0x0)
bind$tipc(r2, 0x0, 0x0)
epoll_create1(0x0)
epoll_create1(0x0)
r3 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000))
syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x926f, 0x100, 0x2, 0x134}, &(0x7f00000002c0), &(0x7f0000000180))
io_uring_enter(r3, 0x8184c, 0x0, 0x9, 0x0, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r5, 0x4, 0x2, 0x82, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x0, 0x0, 0x0, 0x300}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='{', 0x1}], 0x1}}], 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r6, 0x2011}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000340)=0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

363.334154ms ago: executing program 5 (id=5702):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000200007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"})
r3 = syz_open_pts(r2, 0x141601)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

307.443865ms ago: executing program 4 (id=5703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

270.238486ms ago: executing program 0 (id=5704):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0xfffd, 0x0, {0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r1, &(0x7f0000000180), 0x0)

224.541996ms ago: executing program 4 (id=5705):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
socket$kcm(0x10, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init()
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

220.870247ms ago: executing program 5 (id=5706):
r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, 0x0, 0x0, 0x1)
r8 = socket$isdn_base(0x22, 0x3, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xffffffffffffffa1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x100)
r12 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), &(0x7f0000000680), &(0x7f0000000640), {0x20}, &(0x7f0000000940)=""/36, 0x24, &(0x7f00000006c0)=""/93, 0x0, 0x0, {r8}}, 0x58)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000800)={<r13=>0x0}, &(0x7f0000000840)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x0, r9, 0x0, r10, r11, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r12, r13, 0x6})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = getpgid(0x0)
process_vm_writev(r15, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000001140)=[{&(0x7f0000000200)=""/142, 0x8e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r16=>0x0})
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, 0x0, r11, r14, 0x0, 0x69, 0x3}, 0x5, 0x3, 0x5ab9fe46, 0x6, r15, r16, 0x3})
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

154.510177ms ago: executing program 0 (id=5707):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket(0x23, 0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
keyctl$set_reqkey_keyring(0x5, 0xfffffffe)
request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='-\x00', 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', <r3=>0x0, 0x700, 0x700, 0x7345, 0x5, {{0x19, 0x4, 0x3, 0x39, 0x64, 0x65, 0x0, 0x2, 0x4, 0x0, @loopback, @empty, {[@generic={0x83, 0xd, "613087b47624e756a38b5f"}, @lsrr={0x83, 0x7, 0xaa, [@multicast1]}, @timestamp_addr={0x44, 0x34, 0xf1, 0x1, 0x3, [{@local, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010102, 0x800}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0x2}, {@multicast1, 0x80}]}, @rr={0x7, 0x7, 0x34, [@rand_addr=0x64010100]}]}}}}})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x80, 0x1, 0x500, 0x6, 0x20000, r3})
setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={0x0, <r4=>0x0})
ptrace(0x4219, r4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540)={<r5=>0x0, 0x7}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000005c0)={r5, 0x9, 0x9, 0x10001, 0x4, 0x5}, &(0x7f0000000c00)=0x14)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x2, 0x3, 0x6, 0x5}]})

82.306009ms ago: executing program 2 (id=5708):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xfffffffffffffffe, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f4ff000099b83f8c868604000000060000000c00000000008000", @ANYRES32, @ANYBLOB="00000000000400"/20, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x3}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0)
mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
close(r13)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$unix(r13, &(0x7f0000000440)={0x0, 0x35, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r15], 0x18}, 0x0)
close(r14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

33.261839ms ago: executing program 5 (id=5709):
epoll_create1(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x1, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3e8}, [], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x163140, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7)
sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004)

0s ago: executing program 2 (id=5710):
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, 0x0, 0x15)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

][T19686] ip6tnl2: entered allmulticast mode
[  441.111590][T19652] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  441.125683][T19652] EXT4-fs (loop4): This should not happen!! Data will be lost
[  441.125683][T19652] 
[  441.126624][T19686] loop2: detected capacity change from 0 to 512
[  441.135473][T19652] EXT4-fs (loop4): Total free blocks count 0
[  441.147777][T19652] EXT4-fs (loop4): Free/Dirty block details
[  441.153812][T19652] EXT4-fs (loop4): free_blocks=4293918720
[  441.159578][T19652] EXT4-fs (loop4): dirty_blocks=480
[  441.164847][T19652] EXT4-fs (loop4): Block reservation details
[  441.168276][T19688] loop3: detected capacity change from 0 to 1024
[  441.170836][T19652] EXT4-fs (loop4): i_reserved_data_blocks=30
[  441.201560][T19688] EXT4-fs: Mount option(s) incompatible with ext2
[  441.211010][T19686] ext4: Unknown parameter 'subj_type'
[  441.275664][T19688] loop3: detected capacity change from 0 to 1024
[  441.317682][T19688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  441.326944][T19686] loop2: detected capacity change from 0 to 8192
[  441.360723][T19688] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  441.372854][T19695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19695 comm=syz.5.5122
[  441.439434][T19695] bond5: (slave batadv4): Releasing backup interface
[  441.511724][T19688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  441.569888][   T37] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 7)
[  441.675168][T19688] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.5121: lblock 2 mapped to illegal pblock 2 (length 1)
[  441.766127][T12924] EXT4-fs unmount: 7 callbacks suppressed
[  441.769910][T19688] EXT4-fs (loop3): Remounting filesystem read-only
[  441.782350][T19688] __quota_error: 399 callbacks suppressed
[  441.782365][T19688] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  441.809097][T19688] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  441.822363][T19688] EXT4-fs (loop3): 1 orphan inode deleted
[  441.828599][T19688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.860169][T19688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.885440][   T29] audit: type=1326 audit(1748750685.107:17435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f640061d2d0 code=0x7ffc0000
[  441.935323][   T29] audit: type=1326 audit(1748750685.107:17436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f640061e56b code=0x7ffc0000
[  441.958932][   T29] audit: type=1326 audit(1748750685.107:17437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f640061d5ca code=0x7ffc0000
[  441.982427][   T29] audit: type=1326 audit(1748750685.107:17438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  442.006403][   T29] audit: type=1326 audit(1748750685.107:17439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  442.016378][T19712] loop3: detected capacity change from 0 to 512
[  442.030178][   T29] audit: type=1326 audit(1748750685.107:17440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  442.060227][   T29] audit: type=1326 audit(1748750685.107:17441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  442.083988][   T29] audit: type=1326 audit(1748750685.107:17442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.3.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  442.128295][T19712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.147934][T19712] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  442.209146][T19712] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.5129: corrupted inode contents
[  442.231759][T19712] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.5129: mark_inode_dirty error
[  442.251784][T19712] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.5129: corrupted inode contents
[  442.274999][T19712] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.5129: mark_inode_dirty error
[  442.307863][T19712] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.5129: mark inode dirty (error -117)
[  442.338394][T19712] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  442.341688][T19734] loop0: detected capacity change from 0 to 512
[  442.398011][T19734] EXT4-fs (loop0): 1 orphan inode deleted
[  442.412262][ T6507] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  442.424897][T19734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.443904][T19731] loop5: detected capacity change from 0 to 8192
[  442.448175][T19734] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.462288][T19731] vfat: Unknown parameter ''
[  442.470327][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.484200][T19734] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5138: iget: bad i_size value: 360287970189639690
[  442.644060][T12486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.923739][T19779] loop4: detected capacity change from 0 to 512
[  443.010448][T19780] lo speed is unknown, defaulting to 1000
[  443.017289][T19780] lo speed is unknown, defaulting to 1000
[  443.141853][T19783] loop5: detected capacity change from 0 to 256
[  443.196134][T19779] EXT4-fs (loop4): 1 orphan inode deleted
[  443.263980][T19779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.270185][ T6507] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  443.290700][T19779] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.323891][T19779] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5157: iget: bad i_size value: 360287970189639690
[  443.363098][T19783] loop5: detected capacity change from 0 to 8192
[  443.381914][T12924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.475935][T19796] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19796 comm=syz.2.5162
[  443.642799][T19796] bond7: (slave batadv0): Releasing backup interface
[  443.875977][T19806] loop0: detected capacity change from 0 to 1024
[  443.890958][T19806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  443.900137][T19806] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  443.911191][T19806] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  443.922647][T19806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  443.948152][T19806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  443.961345][T19806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.013338][T19811] loop4: detected capacity change from 0 to 1024
[  444.034729][T19811] EXT4-fs: Mount option(s) incompatible with ext2
[  444.079315][T19811] loop4: detected capacity change from 0 to 1024
[  444.087526][T19811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  444.110450][T19811] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  444.121311][T19820] loop3: detected capacity change from 0 to 512
[  444.139081][T19820] ext4: Unknown parameter 'subj_type'
[  444.151927][T19811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  444.249062][T19811] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5169: lblock 2 mapped to illegal pblock 2 (length 1)
[  444.279171][T19811] EXT4-fs (loop4): Remounting filesystem read-only
[  444.289505][T19811] EXT4-fs (loop4): 1 orphan inode deleted
[  444.331616][T19811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.339638][T19838] __nla_validate_parse: 3 callbacks suppressed
[  444.339659][T19838] netlink: 6276 bytes leftover after parsing attributes in process `syz.5.5180'.
[  444.353310][T19811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.555435][T19852] loop2: detected capacity change from 0 to 8192
[  444.563345][T19852] vfat: Unknown parameter ''
[  444.635221][T19869] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19869 comm=syz.4.5189
[  444.702779][T19869] bond3: (slave batadv0): Releasing backup interface
[  444.725562][T19869] bond4: (slave batadv2): Releasing backup interface
[  444.734987][T19869] bond5: (slave batadv3): Releasing backup interface
[  445.059744][T19875] loop3: detected capacity change from 0 to 512
[  445.163674][T19879] loop0: detected capacity change from 0 to 1024
[  445.209741][T19879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  445.218746][T19879] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  445.230455][T19875] EXT4-fs (loop3): 1 orphan inode deleted
[  445.238562][T19879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  445.249158][  T388] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  445.251580][T19879] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.5195: lblock 2 mapped to illegal pblock 2 (length 1)
[  445.271224][T19875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.287659][T19879] EXT4-fs (loop0): Remounting filesystem read-only
[  445.294365][T19879] EXT4-fs (loop0): 1 orphan inode deleted
[  445.300591][T19879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.313916][T19875] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.316862][T19879] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.357475][T19875] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5194: iget: bad i_size value: 360287970189639690
[  445.381372][T19875] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5194: iget: bad i_size value: 360287970189639690
[  445.394699][T19886] netlink: 6276 bytes leftover after parsing attributes in process `syz.5.5197'.
[  445.562178][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.627590][T19902] loop0: detected capacity change from 0 to 1024
[  445.760523][T19904] lo speed is unknown, defaulting to 1000
[  445.766933][T19904] lo speed is unknown, defaulting to 1000
[  445.881601][T19902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.963415][T19902] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.084331][T19902] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 8: comm syz.0.5202: lblock 8 mapped to illegal pblock 8 (length 1)
[  446.105784][T19914] loop5: detected capacity change from 0 to 1024
[  446.118734][T19902] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  446.131191][T19902] EXT4-fs (loop0): This should not happen!! Data will be lost
[  446.131191][T19902] 
[  446.141295][T19914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  446.191279][T19902] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  446.206496][T19914] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  446.217617][T19914] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  446.236313][T19902] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  446.248936][T19902] EXT4-fs (loop0): This should not happen!! Data will be lost
[  446.248936][T19902] 
[  446.258676][T19902] EXT4-fs (loop0): Total free blocks count 0
[  446.264739][T19902] EXT4-fs (loop0): Free/Dirty block details
[  446.270664][T19902] EXT4-fs (loop0): free_blocks=4293918720
[  446.276478][T19902] EXT4-fs (loop0): dirty_blocks=480
[  446.281758][T19902] EXT4-fs (loop0): Block reservation details
[  446.289811][T19914] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  446.400125][  T388] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 7)
[  446.401196][T19914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  446.438541][T19923] loop3: detected capacity change from 0 to 1024
[  446.450483][T19914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.500587][T19923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  446.520589][T19925] x_tables: duplicate underflow at hook 2
[  446.550476][T19923] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  446.561559][T19923] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  446.592460][T19921] loop2: detected capacity change from 0 to 8192
[  446.612801][T19923] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  446.638163][T19921] vfat: Unknown parameter ''
[  446.649917][T19929] x_tables: duplicate underflow at hook 2
[  446.673322][T19923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  446.696924][T19923] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.787487][T19936] loop3: detected capacity change from 0 to 256
[  446.832115][T19934] loop0: detected capacity change from 0 to 512
[  446.844109][T19940] loop5: detected capacity change from 0 to 256
[  446.857885][T19940] vfat: Unknown parameter 'shor†name'
[  446.878295][T19934] ext4: Unknown parameter 'subj_type'
[  446.922627][T19936] loop3: detected capacity change from 0 to 8192
[  447.038401][T19934] loop0: detected capacity change from 0 to 8192
[  447.118019][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5218'.
[  447.449780][T19961] lo speed is unknown, defaulting to 1000
[  447.456677][T19961] lo speed is unknown, defaulting to 1000
[  447.569714][T19962] x_tables: duplicate underflow at hook 2
[  447.772429][T19965] loop0: detected capacity change from 0 to 1024
[  447.777232][T19971] loop2: detected capacity change from 0 to 512
[  447.786051][T19965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  447.798017][T19965] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  447.809060][T19965] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  447.827975][T19965] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  447.861427][T19975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19975 comm=syz.5.5228
[  448.075276][T19971] EXT4-fs (loop2): 1 orphan inode deleted
[  448.199296][T19971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.239400][T19965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  448.309195][T19965] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.318452][   T37] __quota_error: 353 callbacks suppressed
[  448.318468][   T37] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  448.334175][   T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  448.345882][T19971] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.356605][T19981] siw: device registration error -23
[  448.433133][T19971] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5229: iget: bad i_size value: 360287970189639690
[  448.461052][T19971] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5229: iget: bad i_size value: 360287970189639690
[  448.478359][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5235'.
[  448.499027][T19991] loop4: detected capacity change from 0 to 512
[  448.510712][T11592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.542057][T19991] EXT4-fs (loop4): 1 orphan inode deleted
[  448.553645][  T413] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  448.563528][  T413] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[  448.575744][T19991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.596489][T19991] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.651741][T19991] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5236: iget: bad i_size value: 360287970189639690
[  448.653493][   T29] audit: type=1326 audit(1748750691.867:17789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  448.696301][T20001] x_tables: duplicate underflow at hook 2
[  448.708893][T19999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5240'.
[  448.718155][T19999] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5240'.
[  448.727182][T19999] netlink: 'syz.3.5240': attribute type 3 has an invalid length.
[  448.734989][T19999] netlink: 'syz.3.5240': attribute type 2 has an invalid length.
[  448.742748][T19999] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5240'.
[  448.751836][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5240'.
[  448.756302][T19991] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5236: iget: bad i_size value: 360287970189639690
[  448.826491][   T29] audit: type=1326 audit(1748750691.907:17790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  448.850283][   T29] audit: type=1326 audit(1748750691.907:17791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  448.874012][   T29] audit: type=1326 audit(1748750691.907:17792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  448.897865][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5241'.
[  448.907084][   T29] audit: type=1326 audit(1748750691.907:17793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  448.931147][   T29] audit: type=1326 audit(1748750691.907:17794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  448.933136][T20007] loop3: detected capacity change from 0 to 1024
[  448.954781][   T29] audit: type=1326 audit(1748750691.907:17795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19998 comm="syz.3.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  448.972735][T20004] loop5: detected capacity change from 0 to 1024
[  448.984780][   T29] audit: type=1326 audit(1748750691.917:17796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.4.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  449.011254][T20004] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  449.016657][T20007] EXT4-fs: Ignoring removed bh option
[  449.042595][T20004] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  449.049660][T20005] netlink: 6276 bytes leftover after parsing attributes in process `syz.0.5242'.
[  449.053608][T20004] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  449.074076][T20007] EXT4-fs: inline encryption not supported
[  449.079172][T20004] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  449.121795][T20007] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  449.143073][T12924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.159566][T20007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  449.193434][T20004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  449.216336][T20007] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.5240: lblock 2 mapped to illegal pblock 2 (length 1)
[  449.229707][T20004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.263057][T20007] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.5240: lblock 0 mapped to illegal pblock 48 (length 1)
[  449.306547][T20033] loop0: detected capacity change from 0 to 1024
[  449.311608][T20031] loop4: detected capacity change from 0 to 1024
[  449.336426][T20033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  449.354971][T20033] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  449.366013][T20033] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  449.376253][T20007] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5240: Failed to acquire dquot type 0
[  449.390666][T20031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  449.400449][T20007] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  449.415639][T20031] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  449.426243][T20033] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  449.426723][T20031] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  449.447456][T20031] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  449.502800][T20041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20041 comm=syz.5.5251
[  449.564440][T20042] x_tables: duplicate underflow at hook 2
[  449.612889][T20007] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.5240: mark_inode_dirty error
[  449.633946][T20033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  449.659331][T20031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  449.689626][T20007] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  449.719612][T20031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.741397][T20033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.762402][T20007] EXT4-fs (loop3): 1 orphan inode deleted
[  449.778137][ T6507] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  449.821059][T20048] netlink: 6276 bytes leftover after parsing attributes in process `syz.2.5254'.
[  449.838396][T20007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.869248][ T6507] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0
[  449.940746][T19999] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm syz.3.5240: lblock 1 mapped to illegal pblock 1 (length 1)
[  449.964770][T19999] batadv0: Device is already in use.
[  450.027378][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.045363][T11971] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  450.068645][T11971] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  450.081075][T11971] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  450.359229][T20051] netlink: 6276 bytes leftover after parsing attributes in process `syz.5.5256'.
[  450.474061][T20073] x_tables: duplicate underflow at hook 2
[  450.506139][T20066] loop2: detected capacity change from 0 to 512
[  450.522828][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5262'.
[  450.536925][T20075] loop4: detected capacity change from 0 to 1024
[  450.577085][T20075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  450.605503][T20075] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  450.616555][T20075] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  450.641200][T20066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.647688][T20075] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  450.681569][T20066] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  450.778045][T20084] lo speed is unknown, defaulting to 1000
[  450.784692][T20084] lo speed is unknown, defaulting to 1000
[  450.830612][T20086] ip6tnl1: entered allmulticast mode
[  450.844483][T20086] loop3: detected capacity change from 0 to 512
[  450.855185][T20086] ext4: Unknown parameter 'subj_type'
[  451.020861][T20075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  451.075988][T20066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.5260: corrupted inode contents
[  451.190692][T20075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.212593][T20066] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.5260: mark_inode_dirty error
[  451.380589][T20093] loop3: detected capacity change from 0 to 1024
[  451.387148][T20066] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.5260: corrupted inode contents
[  451.408472][T20097] loop5: detected capacity change from 0 to 1024
[  451.418251][T20093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  451.433174][T20066] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.5260: mark_inode_dirty error
[  451.470868][T20093] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  451.481939][T20093] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  451.501556][T20066] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.5260: mark inode dirty (error -117)
[  451.523965][T20093] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  451.535091][T20066] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  451.559830][T20093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  451.593832][T20093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.640453][T20097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.661900][T20097] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.696388][T11592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.776932][T20114] loop2: detected capacity change from 0 to 512
[  451.787859][T20090] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 8: comm syz.5.5267: lblock 8 mapped to illegal pblock 8 (length 1)
[  451.812847][T20090] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  451.825420][T20090] EXT4-fs (loop5): This should not happen!! Data will be lost
[  451.825420][T20090] 
[  451.849869][T20090] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  451.871622][T20114] EXT4-fs (loop2): 1 orphan inode deleted
[  451.878076][T20114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.885253][T20090] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  451.903338][T20090] EXT4-fs (loop5): This should not happen!! Data will be lost
[  451.903338][T20090] 
[  451.913390][T20090] EXT4-fs (loop5): Total free blocks count 0
[  451.919428][T20090] EXT4-fs (loop5): Free/Dirty block details
[  451.921620][T20114] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.925403][T20090] EXT4-fs (loop5): free_blocks=4293918720
[  451.941743][T20090] EXT4-fs (loop5): dirty_blocks=480
[  451.947061][T20090] EXT4-fs (loop5): Block reservation details
[  451.956883][   T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  451.969306][T20114] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5271: iget: bad i_size value: 360287970189639690
[  451.990095][T20102] loop4: detected capacity change from 0 to 1024
[  452.014777][T11592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.016706][T20102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.043056][T16345] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 7)
[  452.057516][T20102] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.092839][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5278'.
[  452.126012][T20102] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 8: comm syz.4.5270: lblock 8 mapped to illegal pblock 8 (length 1)
[  452.152593][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5277'.
[  452.163037][T20102] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  452.175451][T20102] EXT4-fs (loop4): This should not happen!! Data will be lost
[  452.175451][T20102] 
[  452.175580][T20133] loop2: detected capacity change from 0 to 256
[  452.204013][T20102] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  452.207042][T20133] vfat: Unknown parameter 'shor†name'
[  452.225710][T20136] loop5: detected capacity change from 0 to 1024
[  452.252040][T20136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  452.269919][T20102] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  452.282618][T20102] EXT4-fs (loop4): This should not happen!! Data will be lost
[  452.282618][T20102] 
[  452.292353][T20102] EXT4-fs (loop4): Total free blocks count 0
[  452.293409][T20136] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  452.298461][T20102] EXT4-fs (loop4): Free/Dirty block details
[  452.309471][T20136] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  452.315291][T20102] EXT4-fs (loop4): free_blocks=4293918720
[  452.315312][T20102] EXT4-fs (loop4): dirty_blocks=480
[  452.335866][T20102] EXT4-fs (loop4): Block reservation details
[  452.337395][T20136] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  452.352188][T20138] loop3: detected capacity change from 0 to 512
[  452.358963][T20138] ext4: Unknown parameter 'subj_type'
[  452.483877][T20136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  452.501299][T20138] loop3: detected capacity change from 0 to 8192
[  452.516056][T16345] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 7)
[  452.532555][T20136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.613271][T20144] loop0: detected capacity change from 0 to 512
[  452.636221][T20144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.678517][T20144] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  452.694783][T20144] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.5282: corrupted inode contents
[  452.707032][T20144] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.5282: mark_inode_dirty error
[  452.719240][T20144] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.5282: corrupted inode contents
[  452.739489][T20144] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.5282: mark_inode_dirty error
[  452.774329][T20151] loop5: detected capacity change from 0 to 1024
[  452.780829][T20144] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.5282: mark inode dirty (error -117)
[  452.795597][T20151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  452.816443][T20151] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  452.827464][T20151] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  452.856197][T20144] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[  452.873907][T20151] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  452.891758][T20151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  452.933473][T20151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.951241][T12486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.963841][T20161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20161 comm=syz.3.5286
[  453.096307][T20161] bond3: (slave batadv0): Releasing backup interface
[  453.199409][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'.
[  453.208451][T20167] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5289'.
[  453.217465][T20167] netlink: 'syz.2.5289': attribute type 3 has an invalid length.
[  453.225232][T20167] netlink: 'syz.2.5289': attribute type 2 has an invalid length.
[  453.233078][T20167] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5289'.
[  453.242037][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5289'.
[  453.363561][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  453.363580][   T29] audit: type=1326 audit(1748750696.587:17961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.2.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6d9e6be969 code=0x7ffc0000
[  453.479663][   T29] audit: type=1326 audit(1748750696.697:17962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.2.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9e6be969 code=0x7ffc0000
[  453.503357][   T29] audit: type=1326 audit(1748750696.697:17963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.2.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9e6be969 code=0x7ffc0000
[  453.594352][T20171] loop2: detected capacity change from 0 to 1024
[  453.604203][T20171] EXT4-fs: Ignoring removed bh option
[  453.621105][T20171] EXT4-fs: inline encryption not supported
[  453.651534][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5288'.
[  453.656884][T20171] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  453.675326][T20171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  453.696852][T20171] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.5289: lblock 2 mapped to illegal pblock 2 (length 1)
[  453.744897][T20177] loop0: detected capacity change from 0 to 1024
[  453.756584][T20171] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  453.765192][T20171] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.5289: lblock 0 mapped to illegal pblock 48 (length 1)
[  453.779768][T20177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  453.788342][T20171] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  453.797292][T20171] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5289: Failed to acquire dquot type 0
[  453.808778][T20177] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  453.819824][T20177] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  453.829558][T20171] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  453.842193][T20171] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5289: mark_inode_dirty error
[  453.854996][T20177] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  453.868178][T20171] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  453.883478][T20177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  453.912874][   T29] audit: type=1326 audit(1748750697.117:17964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.4.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  453.921419][T20177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.936826][   T29] audit: type=1326 audit(1748750697.117:17965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.4.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  453.953092][T20171] EXT4-fs (loop2): 1 orphan inode deleted
[  453.969322][   T29] audit: type=1326 audit(1748750697.117:17966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.4.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  453.998686][   T29] audit: type=1326 audit(1748750697.117:17967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.4.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  454.012519][T20199] ip6tnl1: entered allmulticast mode
[  454.022316][   T29] audit: type=1326 audit(1748750697.117:17968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20193 comm="syz.4.5299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  454.028360][T20171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.064290][   T51] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  454.095577][   T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  454.108109][T20195] loop4: detected capacity change from 0 to 8192
[  454.116594][T20195] vfat: Unknown parameter ''
[  454.299337][T20167] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm syz.2.5289: lblock 1 mapped to illegal pblock 1 (length 1)
[  454.411693][T20201] loop5: detected capacity change from 0 to 8192
[  454.427086][T20201] vfat: Unknown parameter ''
[  454.439471][T11592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.484105][T11592] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  454.516362][T20217] loop4: detected capacity change from 0 to 1024
[  454.523766][T11592] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  454.541516][T20217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  454.566448][T11592] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  454.586598][T20217] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  454.634203][T20217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  454.657525][T20217] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5307: lblock 2 mapped to illegal pblock 2 (length 1)
[  454.677225][T20225] loop2: detected capacity change from 0 to 1024
[  454.683873][T20217] EXT4-fs (loop4): Remounting filesystem read-only
[  454.690506][T20217] EXT4-fs (loop4): 1 orphan inode deleted
[  454.723057][T20225] EXT4-fs: Mount option(s) incompatible with ext2
[  454.733207][T20233] loop5: detected capacity change from 0 to 512
[  454.740267][T20217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.777288][T20217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.809215][T20225] loop2: detected capacity change from 0 to 1024
[  454.811438][T20242] loop3: detected capacity change from 0 to 512
[  454.851569][T20225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  454.870983][T20225] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  454.887192][T20233] EXT4-fs (loop5): 1 orphan inode deleted
[  454.888004][T20225] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  454.898002][T20242] EXT4-fs (loop3): 1 orphan inode deleted
[  454.902161][T20225] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.5309: lblock 2 mapped to illegal pblock 2 (length 1)
[  454.907439][T20242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.928476][T20233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.942810][T20242] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.956632][T20225] EXT4-fs (loop2): Remounting filesystem read-only
[  454.967019][ T6507] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  454.980192][T20225] EXT4-fs (loop2): 1 orphan inode deleted
[  454.991065][T20225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.994341][T20242] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5318: iget: bad i_size value: 360287970189639690
[  455.016553][T20233] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.027438][ T6507] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  455.046653][T20253] siw: device registration error -23
[  455.054881][T20242] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5318: iget: bad i_size value: 360287970189639690
[  455.091306][T20233] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.5314: iget: bad i_size value: 360287970189639690
[  455.115188][T20233] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.5314: iget: bad i_size value: 360287970189639690
[  455.563875][T20300] loop4: detected capacity change from 0 to 256
[  455.581251][T20300] vfat: Unknown parameter 'shor†name'
[  455.582421][T20302] loop5: detected capacity change from 0 to 512
[  455.728768][T20302] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  455.769046][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5343'.
[  455.879883][T20312] loop3: detected capacity change from 0 to 8192
[  455.892254][T20312] vfat: Unknown parameter ''
[  456.153888][T20334] lo speed is unknown, defaulting to 1000
[  456.160575][T20334] lo speed is unknown, defaulting to 1000
[  456.553748][T20356] loop4: detected capacity change from 0 to 512
[  456.608918][T20356] EXT4-fs (loop4): 1 orphan inode deleted
[  456.615584][T20356] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.626653][  T388] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  456.639626][T20356] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5365: iget: bad i_size value: 360287970189639690
[  456.700033][T20356] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5365: iget: bad i_size value: 360287970189639690
[  456.756708][T20365] loop3: detected capacity change from 0 to 8192
[  456.764864][T20365] vfat: Unknown parameter ''
[  457.020493][T20388] loop3: detected capacity change from 0 to 1024
[  457.056059][T20388] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.067100][T20394] loop0: detected capacity change from 0 to 1024
[  457.078543][T20394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  457.087234][T20394] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  457.098205][T20394] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  457.109805][T20394] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  457.109954][T20400] loop5: detected capacity change from 0 to 256
[  457.155873][T20374] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.5372: lblock 8 mapped to illegal pblock 8 (length 1)
[  457.202083][T20374] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  457.214583][T20374] EXT4-fs (loop3): This should not happen!! Data will be lost
[  457.214583][T20374] 
[  457.253887][T20400] loop5: detected capacity change from 0 to 8192
[  457.265036][T20374] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  457.280480][T20374] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  457.293000][T20374] EXT4-fs (loop3): This should not happen!! Data will be lost
[  457.293000][T20374] 
[  457.302700][T20374] EXT4-fs (loop3): Total free blocks count 0
[  457.308807][T20374] EXT4-fs (loop3): Free/Dirty block details
[  457.314809][T20374] EXT4-fs (loop3): free_blocks=4293918720
[  457.320582][T20374] EXT4-fs (loop3): dirty_blocks=480
[  457.325840][T20374] EXT4-fs (loop3): Block reservation details
[  457.331848][T20374] EXT4-fs (loop3): i_reserved_data_blocks=30
[  457.333505][T20405] loop4: detected capacity change from 0 to 8192
[  457.352471][T20405] vfat: Unknown parameter ''
[  457.383580][  T413] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 7)
[  457.476465][T20417] loop3: detected capacity change from 0 to 1024
[  457.486173][T20417] EXT4-fs: Mount option(s) incompatible with ext2
[  457.518536][T20417] loop3: detected capacity change from 0 to 1024
[  457.558244][T20417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  457.585726][T20417] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  457.602012][T20417] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  457.611358][T20417] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.5385: lblock 2 mapped to illegal pblock 2 (length 1)
[  457.626585][T20417] EXT4-fs (loop3): Remounting filesystem read-only
[  457.651325][T20417] EXT4-fs (loop3): 1 orphan inode deleted
[  457.708725][T20434] loop2: detected capacity change from 0 to 512
[  457.737734][T20434] ext4 filesystem being mounted at /532/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  457.763455][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5394'.
[  457.772533][T20439] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5394'.
[  457.781605][T20439] netlink: 'syz.3.5394': attribute type 3 has an invalid length.
[  457.789514][T20439] netlink: 'syz.3.5394': attribute type 2 has an invalid length.
[  457.797466][T20439] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5394'.
[  457.806570][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'.
[  457.948341][T20457] loop4: detected capacity change from 0 to 256
[  457.972414][T20444] loop5: detected capacity change from 0 to 1015
[  457.994540][T20444] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (507 blocks)
[  458.072940][T20457] loop4: detected capacity change from 0 to 8192
[  458.110964][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5401'.
[  458.377473][T20485] loop5: detected capacity change from 0 to 256
[  458.513908][T20486] lo speed is unknown, defaulting to 1000
[  458.520582][T20486] lo speed is unknown, defaulting to 1000
[  458.770351][   T29] kauditd_printk_skb: 670 callbacks suppressed
[  458.770371][   T29] audit: type=1326 audit(1748750701.987:18628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  458.822043][T20494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5413'.
[  458.831103][T20494] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5413'.
[  458.840129][T20494] netlink: 'syz.3.5413': attribute type 3 has an invalid length.
[  458.847924][T20494] netlink: 'syz.3.5413': attribute type 2 has an invalid length.
[  458.855843][T20494] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5413'.
[  458.864922][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5413'.
[  458.920089][T20496] loop2: detected capacity change from 0 to 1024
[  458.927918][   T29] audit: type=1326 audit(1748750702.027:18629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  458.951624][   T29] audit: type=1326 audit(1748750702.027:18630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  458.975278][   T29] audit: type=1326 audit(1748750702.027:18631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  458.999249][   T29] audit: type=1326 audit(1748750702.027:18632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  459.022932][   T29] audit: type=1326 audit(1748750702.037:18633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  459.046531][   T29] audit: type=1326 audit(1748750702.037:18634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  459.070561][   T29] audit: type=1326 audit(1748750702.037:18635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  459.094217][   T29] audit: type=1326 audit(1748750702.037:18636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  459.117882][   T29] audit: type=1326 audit(1748750702.037:18637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20492 comm="syz.3.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640061e969 code=0x7ffc0000
[  459.141734][T20500] loop3: detected capacity change from 0 to 1024
[  459.157357][T20485] loop5: detected capacity change from 0 to 8192
[  459.165285][T20500] EXT4-fs: Ignoring removed bh option
[  459.170802][T20500] EXT4-fs: inline encryption not supported
[  459.203847][T20500] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  459.216870][T20500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  459.269202][T20500] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.5413: lblock 2 mapped to illegal pblock 2 (length 1)
[  459.294152][T20496] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.332600][T20512] loop4: detected capacity change from 0 to 512
[  459.339081][T20500] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.5413: lblock 0 mapped to illegal pblock 48 (length 1)
[  459.382125][T20500] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5413: Failed to acquire dquot type 0
[  459.396421][T20493] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 8: comm syz.2.5412: lblock 8 mapped to illegal pblock 8 (length 1)
[  459.436968][T20493] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  459.449484][T20493] EXT4-fs (loop2): This should not happen!! Data will be lost
[  459.449484][T20493] 
[  459.471623][T20512] EXT4-fs (loop4): 1 orphan inode deleted
[  459.483203][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  459.501232][T20500] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  459.521452][T20512] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.527769][T20493] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  459.545620][T20500] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.5413: mark_inode_dirty error
[  459.547885][T20493] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  459.570588][T20493] EXT4-fs (loop2): This should not happen!! Data will be lost
[  459.570588][T20493] 
[  459.580343][T20493] EXT4-fs (loop2): Total free blocks count 0
[  459.582239][T20512] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5416: iget: bad i_size value: 360287970189639690
[  459.586460][T20493] EXT4-fs (loop2): Free/Dirty block details
[  459.605325][T20493] EXT4-fs (loop2): free_blocks=4293918720
[  459.611069][T20493] EXT4-fs (loop2): dirty_blocks=480
[  459.616354][T20493] EXT4-fs (loop2): Block reservation details
[  459.622429][T20493] EXT4-fs (loop2): i_reserved_data_blocks=30
[  459.622974][T20525] loop0: detected capacity change from 0 to 1024
[  459.638577][T20500] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  459.665957][T20512] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5416: iget: bad i_size value: 360287970189639690
[  459.703714][  T413] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 7)
[  459.739225][T20525] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.762961][T20500] EXT4-fs (loop3): 1 orphan inode deleted
[  459.781508][  T413] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  459.803021][T20494] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm syz.3.5413: lblock 1 mapped to illegal pblock 1 (length 1)
[  459.803013][  T413] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  459.950347][T20532] lo speed is unknown, defaulting to 1000
[  459.956837][T20532] lo speed is unknown, defaulting to 1000
[  460.316466][T11971] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  460.359628][T11971] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  460.370961][T11971] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  460.394232][T20516] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 8: comm syz.0.5419: lblock 8 mapped to illegal pblock 8 (length 1)
[  460.413186][T20516] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  460.425603][T20516] EXT4-fs (loop0): This should not happen!! Data will be lost
[  460.425603][T20516] 
[  460.480190][T20548] loop3: detected capacity change from 0 to 1024
[  460.529016][T20516] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  460.555540][T20516] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  460.568074][T20516] EXT4-fs (loop0): This should not happen!! Data will be lost
[  460.568074][T20516] 
[  460.568193][T20548] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  460.577881][T20516] EXT4-fs (loop0): Total free blocks count 0
[  460.577902][T20516] EXT4-fs (loop0): Free/Dirty block details
[  460.577917][T20516] EXT4-fs (loop0): free_blocks=4293918720
[  460.592323][T20548] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  460.592360][T20548] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  460.592419][T20548] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  460.598318][T20516] EXT4-fs (loop0): dirty_blocks=480
[  460.598338][T20516] EXT4-fs (loop0): Block reservation details
[  460.646297][T20516] EXT4-fs (loop0): i_reserved_data_blocks=30
[  460.805165][   T37] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 7)
[  460.926007][T20582] __nla_validate_parse: 1 callbacks suppressed
[  460.926027][T20582] netlink: 6276 bytes leftover after parsing attributes in process `syz.3.5436'.
[  460.976813][T20572] loop5: detected capacity change from 0 to 8192
[  460.984299][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5440'.
[  460.996611][T20572] vfat: Unknown parameter ''
[  461.017622][T20587] loop2: detected capacity change from 0 to 1024
[  461.032416][T20589] loop4: detected capacity change from 0 to 512
[  461.060893][T20587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  461.092847][T20587] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  461.103854][T20587] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  461.141248][T20589] EXT4-fs (loop4): 1 orphan inode deleted
[  461.152991][  T388] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  461.164817][T20587] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  461.167639][T20589] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.189305][T20589] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5441: iget: bad i_size value: 360287970189639690
[  461.421669][T20621] loop3: detected capacity change from 0 to 1024
[  461.445548][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5457'.
[  461.472351][T20621] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.520979][T20628] loop0: detected capacity change from 0 to 8192
[  461.529814][T20612] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.5451: lblock 8 mapped to illegal pblock 8 (length 1)
[  461.545362][T20628] vfat: Unknown parameter ''
[  461.602174][T20639] loop5: detected capacity change from 0 to 1024
[  461.609343][T20639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  461.618721][T20612] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  461.631047][T20612] EXT4-fs (loop3): This should not happen!! Data will be lost
[  461.631047][T20612] 
[  461.641818][T20639] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  461.652837][T20639] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  461.667510][T20639] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  461.682457][T20643] loop2: detected capacity change from 0 to 256
[  461.723422][T20612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  461.767287][T20649] loop0: detected capacity change from 0 to 512
[  461.802738][T20612] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  461.815353][T20612] EXT4-fs (loop3): This should not happen!! Data will be lost
[  461.815353][T20612] 
[  461.825044][T20612] EXT4-fs (loop3): Total free blocks count 0
[  461.831085][T20612] EXT4-fs (loop3): Free/Dirty block details
[  461.837033][T20612] EXT4-fs (loop3): free_blocks=4293918720
[  461.842840][T20612] EXT4-fs (loop3): dirty_blocks=480
[  461.848064][T20612] EXT4-fs (loop3): Block reservation details
[  461.854215][T20612] EXT4-fs (loop3): i_reserved_data_blocks=30
[  461.869377][T20655] loop4: detected capacity change from 0 to 512
[  461.894578][T20643] loop2: detected capacity change from 0 to 8192
[  461.902334][T20649] EXT4-fs (loop0): 1 orphan inode deleted
[  461.912885][ T6507] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  461.925318][  T413] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 7)
[  461.931964][T20649] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.956279][T20655] EXT4-fs (loop4): 1 orphan inode deleted
[  461.962596][  T413] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[  461.968080][T20649] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5464: iget: bad i_size value: 360287970189639690
[  461.992922][T20655] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.027206][T20653] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5466: iget: bad i_size value: 360287970189639690
[  462.048713][T20653] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5466: iget: bad i_size value: 360287970189639690
[  462.161934][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5468'.
[  462.197470][T20666] loop3: detected capacity change from 0 to 1024
[  462.211920][T20666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  462.220716][T20666] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  462.231690][T20666] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  462.242093][T20666] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  462.401371][T20681] lo speed is unknown, defaulting to 1000
[  462.407795][T20681] lo speed is unknown, defaulting to 1000
[  462.691375][T20682] loop4: detected capacity change from 0 to 1024
[  462.700261][T20682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  462.742855][T20682] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  462.773624][T20682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  462.787779][T20695] loop2: detected capacity change from 0 to 512
[  462.797905][T20682] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5473: lblock 2 mapped to illegal pblock 2 (length 1)
[  462.821756][T20682] EXT4-fs (loop4): Remounting filesystem read-only
[  462.829110][T20682] EXT4-fs (loop4): 1 orphan inode deleted
[  462.883042][T20695] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  462.910446][T20702] loop5: detected capacity change from 0 to 1024
[  462.918111][T20695] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.5479: corrupted inode contents
[  462.974394][T20695] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.5479: mark_inode_dirty error
[  462.996546][T20707] loop3: detected capacity change from 0 to 512
[  463.002614][T20695] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.5479: corrupted inode contents
[  463.015370][T20695] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.5479: mark_inode_dirty error
[  463.034241][T20702] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.034696][T20695] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.5479: mark inode dirty (error -117)
[  463.066214][T20695] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  463.092613][T20696] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 8: comm syz.5.5478: lblock 8 mapped to illegal pblock 8 (length 1)
[  463.112429][T20713] loop0: detected capacity change from 0 to 512
[  463.130259][T20707] EXT4-fs (loop3): 1 orphan inode deleted
[  463.136599][ T6507] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  463.154844][T20707] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.169030][T20696] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  463.181450][T20696] EXT4-fs (loop5): This should not happen!! Data will be lost
[  463.181450][T20696] 
[  463.183628][T20707] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5481: iget: bad i_size value: 360287970189639690
[  463.225894][T20721] loop4: detected capacity change from 0 to 512
[  463.240921][T20696] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  463.255989][T20696] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  463.268554][T20696] EXT4-fs (loop5): This should not happen!! Data will be lost
[  463.268554][T20696] 
[  463.278317][T20696] EXT4-fs (loop5): Total free blocks count 0
[  463.284440][T20696] EXT4-fs (loop5): Free/Dirty block details
[  463.290367][T20696] EXT4-fs (loop5): free_blocks=4293918720
[  463.296230][T20696] EXT4-fs (loop5): dirty_blocks=480
[  463.300996][T20713] EXT4-fs (loop0): 1 orphan inode deleted
[  463.301434][T20696] EXT4-fs (loop5): Block reservation details
[  463.310546][T20713] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.313186][T20696] EXT4-fs (loop5): i_reserved_data_blocks=30
[  463.323796][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[  463.353875][T20713] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5483: iget: bad i_size value: 360287970189639690
[  463.378330][T20721] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  463.422154][  T388] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 7)
[  463.422543][T20713] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5483: iget: bad i_size value: 360287970189639690
[  463.463152][T20721] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.5487: corrupted inode contents
[  463.493312][T20721] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.5487: mark_inode_dirty error
[  463.514514][T20721] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.5487: corrupted inode contents
[  463.571899][T20721] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.5487: mark_inode_dirty error
[  463.592800][T20721] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.5487: mark inode dirty (error -117)
[  463.612239][T20721] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  463.614658][T20741] loop2: detected capacity change from 0 to 512
[  463.692237][T20741] ext4 filesystem being mounted at /554/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  463.715143][T20739] netlink: 6276 bytes leftover after parsing attributes in process `syz.0.5491'.
[  463.770511][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5499'.
[  463.779605][T20757] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5499'.
[  463.788656][T20757] netlink: 'syz.0.5499': attribute type 3 has an invalid length.
[  463.796442][T20757] netlink: 'syz.0.5499': attribute type 2 has an invalid length.
[  463.804219][T20757] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5499'.
[  463.813337][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5499'.
[  463.830304][   T29] kauditd_printk_skb: 482 callbacks suppressed
[  463.830323][   T29] audit: type=1326 audit(1748750707.047:19108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  463.874952][T20766] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20766 comm=syz.3.5500
[  464.064923][T20767] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.5494: corrupted inode contents
[  464.220316][   T29] audit: type=1326 audit(1748750707.227:19109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.244118][   T29] audit: type=1326 audit(1748750707.227:19110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.267864][   T29] audit: type=1326 audit(1748750707.227:19111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.291624][   T29] audit: type=1326 audit(1748750707.227:19112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.315371][   T29] audit: type=1326 audit(1748750707.227:19113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.339488][   T29] audit: type=1326 audit(1748750707.227:19114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.363233][   T29] audit: type=1326 audit(1748750707.227:19115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.387629][   T29] audit: type=1326 audit(1748750707.327:19116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.411566][   T29] audit: type=1326 audit(1748750707.327:19117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20756 comm="syz.0.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecabc1e969 code=0x7ffc0000
[  464.442408][T20757] loop0: detected capacity change from 0 to 1024
[  464.456079][T20767] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.5494: mark_inode_dirty error
[  464.460905][T20757] EXT4-fs: Ignoring removed bh option
[  464.481148][T20757] EXT4-fs: inline encryption not supported
[  464.487658][T20767] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.5494: corrupted inode contents
[  464.501527][T20767] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.5494: mark_inode_dirty error
[  464.508825][T20757] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  464.553326][T20767] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.5494: mark inode dirty (error -117)
[  464.569911][T20757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  464.583103][T20779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20779 comm=syz.5.5505
[  464.666418][T20767] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  464.743569][T20757] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.5499: lblock 2 mapped to illegal pblock 2 (length 1)
[  465.220951][T20757] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.5499: lblock 0 mapped to illegal pblock 48 (length 1)
[  465.366125][T20757] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5499: Failed to acquire dquot type 0
[  465.384466][T20788] netlink: 6276 bytes leftover after parsing attributes in process `syz.4.5510'.
[  465.428158][T20757] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  465.441489][T20757] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.5499: mark_inode_dirty error
[  465.454942][T20757] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  465.469504][T20757] EXT4-fs (loop0): 1 orphan inode deleted
[  465.492954][  T413] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  465.564640][T20786] loop3: detected capacity change from 0 to 1024
[  465.578369][  T413] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  465.603282][T20807] loop5: detected capacity change from 0 to 1024
[  465.623370][T20807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  465.656600][T20786] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.673020][T20807] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  465.684016][T20807] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  465.694323][T20810] loop2: detected capacity change from 0 to 8192
[  465.701062][T12486] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  465.713080][T20786] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.5509: lblock 8 mapped to illegal pblock 8 (length 1)
[  465.732210][T20807] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  465.744268][T20810] vfat: Unknown parameter ''
[  465.751964][T12486] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  465.763609][T12486] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  465.774989][T20786] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  465.787620][T20786] EXT4-fs (loop3): This should not happen!! Data will be lost
[  465.787620][T20786] 
[  465.831669][T20821] loop4: detected capacity change from 0 to 512
[  465.897570][T20821] EXT4-fs (loop4): 1 orphan inode deleted
[  465.912505][T20786] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  465.913165][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  465.927662][T20786] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  465.951351][T20786] EXT4-fs (loop3): This should not happen!! Data will be lost
[  465.951351][T20786] 
[  465.961059][T20786] EXT4-fs (loop3): Total free blocks count 0
[  465.961243][T20821] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.967091][T20786] EXT4-fs (loop3): Free/Dirty block details
[  465.967144][T20786] EXT4-fs (loop3): free_blocks=4293918720
[  465.989367][T20786] EXT4-fs (loop3): dirty_blocks=480
[  465.994635][T20786] EXT4-fs (loop3): Block reservation details
[  466.000665][T20786] EXT4-fs (loop3): i_reserved_data_blocks=30
[  466.064228][T20821] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5522: iget: bad i_size value: 360287970189639690
[  466.078453][T16345] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 7)
[  466.095665][T20821] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5522: iget: bad i_size value: 360287970189639690
[  466.147517][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5530'.
[  466.156658][T20844] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5530'.
[  466.165816][T20844] netlink: 'syz.5.5530': attribute type 3 has an invalid length.
[  466.173758][T20844] netlink: 'syz.5.5530': attribute type 2 has an invalid length.
[  466.181576][T20844] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5530'.
[  466.190640][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5530'.
[  466.234634][T20840] netlink: 6276 bytes leftover after parsing attributes in process `syz.2.5529'.
[  466.253925][T20853] siw: device registration error -23
[  466.307816][T20860] loop0: detected capacity change from 0 to 512
[  466.314636][T20860] ext4: Unknown parameter 'subj_type'
[  466.370843][T20844] loop5: detected capacity change from 0 to 1024
[  466.398011][T20844] EXT4-fs: Ignoring removed bh option
[  466.508485][T20844] EXT4-fs: inline encryption not supported
[  466.543381][T20844] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  466.776362][T20879] lo speed is unknown, defaulting to 1000
[  466.783374][T20879] lo speed is unknown, defaulting to 1000
[  467.536126][T20844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  467.554506][T20844] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5530: lblock 2 mapped to illegal pblock 2 (length 1)
[  467.569130][T20844] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.5530: lblock 0 mapped to illegal pblock 48 (length 1)
[  467.752085][T20882] lo speed is unknown, defaulting to 1000
[  467.758279][T20882] lo speed is unknown, defaulting to 1000
[  468.375064][T20886] lo speed is unknown, defaulting to 1000
[  468.381297][T20886] lo speed is unknown, defaulting to 1000
[  468.512049][T20844] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5530: Failed to acquire dquot type 0
[  468.642565][T20891] loop4: detected capacity change from 0 to 1024
[  468.676060][T20844] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  468.724391][T20891] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  468.748010][T20844] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5530: mark_inode_dirty error
[  468.818166][T20844] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  468.852116][   T29] kauditd_printk_skb: 226 callbacks suppressed
[  468.852184][   T29] audit: type=1326 audit(1748750712.067:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.4.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  468.881984][   T29] audit: type=1326 audit(1748750712.067:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.4.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  468.905609][   T29] audit: type=1326 audit(1748750712.067:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.4.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  468.929245][   T29] audit: type=1326 audit(1748750712.067:19341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.4.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  468.952791][   T29] audit: type=1326 audit(1748750712.067:19342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.4.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  468.976443][   T29] audit: type=1326 audit(1748750712.067:19343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.4.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  469.000204][   T29] audit: type=1326 audit(1748750712.067:19344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.4.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  469.031261][T20873] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 8: comm syz.4.5539: lblock 8 mapped to illegal pblock 8 (length 8)
[  469.052800][T20844] EXT4-fs (loop5): 1 orphan inode deleted
[  469.083434][   T29] audit: type=1326 audit(1748750712.287:19345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20843 comm="syz.5.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ba8e3d2d0 code=0x7ffc0000
[  469.090532][  T388] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  469.107360][   T29] audit: type=1326 audit(1748750712.287:19346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20843 comm="syz.5.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f1ba8e3d6b7 code=0x7ffc0000
[  469.145189][   T29] audit: type=1326 audit(1748750712.287:19347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20843 comm="syz.5.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ba8e3d2d0 code=0x7ffc0000
[  469.188827][  T388] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  469.202548][T20873] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.5539: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  469.220323][T15074] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  469.233932][T15074] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  469.246567][T15074] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  469.298146][T20912] loop5: detected capacity change from 0 to 512
[  469.318893][  T388] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 7)
[  469.373858][  T388] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[  469.386281][  T388] EXT4-fs (loop4): This should not happen!! Data will be lost
[  469.386281][  T388] 
[  469.411512][T20916] loop3: detected capacity change from 0 to 256
[  469.437640][T20912] EXT4-fs (loop5): 1 orphan inode deleted
[  469.448972][T20912] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.460913][ T6507] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[  469.482831][T20912] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.5549: iget: bad i_size value: 360287970189639690
[  469.524508][T20912] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.5549: iget: bad i_size value: 360287970189639690
[  469.544979][T20916] loop3: detected capacity change from 0 to 8192
[  469.551730][T20920] loop4: detected capacity change from 0 to 1024
[  469.572469][T20920] EXT4-fs: Mount option(s) incompatible with ext2
[  469.605455][T20920] loop4: detected capacity change from 0 to 1024
[  469.615060][T20920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  469.658908][T20920] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  469.743020][T20920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  469.766304][T20920] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5552: lblock 2 mapped to illegal pblock 2 (length 1)
[  469.793838][T20920] EXT4-fs (loop4): Remounting filesystem read-only
[  469.801013][T20920] EXT4-fs (loop4): 1 orphan inode deleted
[  469.826003][T20931] loop2: detected capacity change from 0 to 1024
[  469.915708][T20933] lo speed is unknown, defaulting to 1000
[  469.922624][T20933] lo speed is unknown, defaulting to 1000
[  470.040673][T20931] EXT4-fs: Mount option(s) incompatible with ext2
[  470.233289][T20931] loop2: detected capacity change from 0 to 1024
[  470.243496][T20931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  470.282496][T20931] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  470.318608][T20931] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  470.340990][T20931] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.5555: lblock 2 mapped to illegal pblock 2 (length 1)
[  470.374727][T20931] EXT4-fs (loop2): Remounting filesystem read-only
[  470.381437][T20931] EXT4-fs (loop2): 1 orphan inode deleted
[  470.468493][T20929] lo speed is unknown, defaulting to 1000
[  470.476304][T20943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20943 comm=syz.4.5558
[  470.629646][T20929] lo speed is unknown, defaulting to 1000
[  470.991822][T20958] loop3: detected capacity change from 0 to 512
[  471.037595][T20959] loop2: detected capacity change from 0 to 1024
[  471.082609][T20958] EXT4-fs (loop3): 1 orphan inode deleted
[  471.101812][   T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  471.144091][T20958] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.145170][T20959] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.203066][T20953] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 8: comm syz.2.5563: lblock 8 mapped to illegal pblock 8 (length 1)
[  471.230554][T20958] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5565: iget: bad i_size value: 360287970189639690
[  471.262028][T20965] loop5: detected capacity change from 0 to 8192
[  471.284670][T20958] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5565: iget: bad i_size value: 360287970189639690
[  471.310965][T20953] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  471.323532][T20953] EXT4-fs (loop2): This should not happen!! Data will be lost
[  471.323532][T20953] 
[  471.349921][T20975] loop4: detected capacity change from 0 to 1024
[  471.359271][T20975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  471.380399][T20975] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  471.388233][T20953] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  471.418018][T20953] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  471.430684][T20953] EXT4-fs (loop2): This should not happen!! Data will be lost
[  471.430684][T20953] 
[  471.440508][T20953] EXT4-fs (loop2): Total free blocks count 0
[  471.446623][T20953] EXT4-fs (loop2): Free/Dirty block details
[  471.452559][T20953] EXT4-fs (loop2): free_blocks=4293918720
[  471.458497][T20953] EXT4-fs (loop2): dirty_blocks=480
[  471.463775][T20953] EXT4-fs (loop2): Block reservation details
[  471.469779][T20953] EXT4-fs (loop2): i_reserved_data_blocks=30
[  471.482873][T20975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  471.529665][T20975] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.5568: lblock 2 mapped to illegal pblock 2 (length 1)
[  471.569715][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5572'.
[  471.584677][T20986] loop3: detected capacity change from 0 to 1024
[  471.594609][T20975] EXT4-fs (loop4): Remounting filesystem read-only
[  471.606226][T20986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  471.631522][ T6507] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 7)
[  471.649772][T20975] EXT4-fs (loop4): 1 orphan inode deleted
[  471.663064][T20986] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  471.674125][T20986] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  471.691595][T20986] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  471.804712][T21004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21004 comm=syz.5.5576
[  472.167633][T21006] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21006 comm=syz.4.5578
[  472.300126][T21011] loop2: detected capacity change from 0 to 512
[  472.307755][T21012] loop3: detected capacity change from 0 to 1024
[  472.317505][T21011] ext4: Unknown parameter 'subj_type'
[  472.346554][T21012] EXT4-fs mount: 79 callbacks suppressed
[  472.346575][T21012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.380583][T21012] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.434934][T21009] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.5579: lblock 8 mapped to illegal pblock 8 (length 8)
[  472.451114][T21009] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.5579: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  472.477873][T21022] loop2: detected capacity change from 0 to 1024
[  472.489252][T21022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  472.501724][T21022] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  472.512740][T21022] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  472.523575][T21022] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  472.538546][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.563630][T21022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  472.583356][T21022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.831042][T21023] lo speed is unknown, defaulting to 1000
[  472.837756][T21023] lo speed is unknown, defaulting to 1000
[  472.852487][T21043] loop2: detected capacity change from 0 to 512
[  472.877013][T21044] loop3: detected capacity change from 0 to 1024
[  472.884823][T21044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  472.915660][T21044] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  472.941332][T21043] ext4: Unknown parameter 'subj_type'
[  473.078505][T21050] loop2: detected capacity change from 0 to 512
[  473.181743][T21044] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  473.399666][T21044] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.5589: lblock 2 mapped to illegal pblock 2 (length 1)
[  473.415379][T21050] EXT4-fs (loop2): 1 orphan inode deleted
[  473.421620][T21050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.445963][   T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  473.499159][T21044] EXT4-fs (loop3): Remounting filesystem read-only
[  473.515438][T21050] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.533888][T21044] EXT4-fs (loop3): 1 orphan inode deleted
[  473.566639][T21044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.600081][T21050] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5593: iget: bad i_size value: 360287970189639690
[  473.618034][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.679748][T21063] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5593: iget: bad i_size value: 360287970189639690
[  473.699877][T21062] loop5: detected capacity change from 0 to 8192
[  473.750135][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5598'.
[  473.806827][T11592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.942515][   T29] kauditd_printk_skb: 458 callbacks suppressed
[  473.942534][   T29] audit: type=1326 audit(1748750717.157:19794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  473.949597][T21072] loop5: detected capacity change from 0 to 1024
[  473.972543][   T29] audit: type=1326 audit(1748750717.157:19795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.018443][T21072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  474.027215][   T29] audit: type=1326 audit(1748750717.157:19796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.050846][   T29] audit: type=1326 audit(1748750717.157:19797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.074567][   T29] audit: type=1326 audit(1748750717.157:19798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.094767][T21072] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  474.098185][   T29] audit: type=1326 audit(1748750717.157:19799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.132052][   T29] audit: type=1326 audit(1748750717.157:19800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.155594][   T29] audit: type=1326 audit(1748750717.157:19801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.179347][   T29] audit: type=1326 audit(1748750717.157:19802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.183292][T21072] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  474.203031][   T29] audit: type=1326 audit(1748750717.157:19803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21071 comm="syz.5.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba8e3e969 code=0x7ffc0000
[  474.220852][T21072] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5601: lblock 2 mapped to illegal pblock 2 (length 1)
[  474.263476][T21072] EXT4-fs (loop5): Remounting filesystem read-only
[  474.274165][T21072] EXT4-fs (loop5): 1 orphan inode deleted
[  474.280506][T21072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.342546][T21072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.462241][T21089] loop0: detected capacity change from 0 to 8192
[  474.484343][T21089] vfat: Unknown parameter ''
[  474.522123][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5609'.
[  474.536709][T21091] loop2: detected capacity change from 0 to 1024
[  474.559184][T21091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  474.574530][T21091] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  474.585585][T21091] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  474.620145][T21091] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  474.657713][T21091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  474.687121][T21095] loop4: detected capacity change from 0 to 8192
[  474.725258][T21100] loop3: detected capacity change from 0 to 8192
[  474.733612][T21091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.792874][T21110] netlink: 6276 bytes leftover after parsing attributes in process `syz.0.5615'.
[  474.932099][T21125] loop3: detected capacity change from 0 to 512
[  474.992853][T21125] EXT4-fs (loop3): 1 orphan inode deleted
[  474.999055][T21125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.014589][   T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  475.047944][T21133] loop5: detected capacity change from 0 to 256
[  475.083165][T21133] vfat: Unknown parameter 'shor†name'
[  475.245096][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5629'.
[  475.266937][T21125] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  475.311909][T21129] loop0: detected capacity change from 0 to 8192
[  475.319111][T21129] vfat: Unknown parameter ''
[  475.325496][T21141] loop2: detected capacity change from 0 to 1024
[  475.325974][T21125] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5619: iget: bad i_size value: 360287970189639690
[  475.384512][T21125] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5619: iget: bad i_size value: 360287970189639690
[  475.409817][T21141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  475.444370][T21146] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  475.455470][T21141] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  475.466472][T21141] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  475.484763][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.515771][T21141] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  475.602324][T21149] loop0: detected capacity change from 0 to 8192
[  475.733423][T21141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  475.758223][T21141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.768660][T21156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5633'.
[  475.777678][T21156] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5633'.
[  475.786789][T21156] netlink: 'syz.0.5633': attribute type 3 has an invalid length.
[  475.794560][T21156] netlink: 'syz.0.5633': attribute type 2 has an invalid length.
[  475.802302][T21156] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5633'.
[  475.811335][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5633'.
[  475.972754][T21164] siw: device registration error -23
[  476.099004][T21178] loop0: detected capacity change from 0 to 512
[  476.118682][T21180] loop5: detected capacity change from 0 to 1024
[  476.194665][T21178] EXT4-fs (loop0): 1 orphan inode deleted
[  476.200940][T21178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.214348][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  476.244451][T21180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.267842][T21182] loop2: detected capacity change from 0 to 8192
[  476.282449][T21180] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.305694][T21178] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.334000][T21165] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 8: comm syz.5.5637: lblock 8 mapped to illegal pblock 8 (length 8)
[  476.353628][T21178] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5642: iget: bad i_size value: 360287970189639690
[  476.367855][T21165] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.5637: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  476.406863][T21178] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5642: iget: bad i_size value: 360287970189639690
[  476.407452][T21190] loop3: detected capacity change from 0 to 1024
[  476.451042][T21190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  476.483821][T21190] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  476.494880][T21190] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  476.504719][T21190] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  476.517060][T21190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  476.530575][T21190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.550433][T12486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.586762][T15074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.672609][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5650'.
[  476.703271][T21197] netlink: 6276 bytes leftover after parsing attributes in process `syz.0.5647'.
[  476.863414][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5652'.
[  476.872493][T21215] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5652'.
[  476.881519][T21215] netlink: 'syz.4.5652': attribute type 3 has an invalid length.
[  476.889292][T21215] netlink: 'syz.4.5652': attribute type 2 has an invalid length.
[  476.897089][T21215] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5652'.
[  476.906088][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5652'.
[  477.133302][T21230] lo speed is unknown, defaulting to 1000
[  477.140306][T21230] lo speed is unknown, defaulting to 1000
[  477.492320][T21235] loop2: detected capacity change from 0 to 512
[  477.518266][T21236] loop5: detected capacity change from 0 to 1024
[  477.584289][T21236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  477.857797][T21235] EXT4-fs (loop2): 1 orphan inode deleted
[  477.900911][T21236] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  477.912367][  T413] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[  477.919220][T21235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.961622][T21235] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.962706][T21236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  477.976444][T21235] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5657: iget: bad i_size value: 360287970189639690
[  478.006807][T21245] loop0: detected capacity change from 0 to 512
[  478.017967][T21236] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5658: lblock 2 mapped to illegal pblock 2 (length 1)
[  478.051964][T21236] EXT4-fs (loop5): Remounting filesystem read-only
[  478.058982][T21236] EXT4-fs (loop5): 1 orphan inode deleted
[  478.094695][T11592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.103097][T21236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.120484][T21220] lo speed is unknown, defaulting to 1000
[  478.122132][T21245] EXT4-fs (loop0): 1 orphan inode deleted
[  478.134413][T21236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.142782][  T388] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  478.153765][T21245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.155209][T21220] lo speed is unknown, defaulting to 1000
[  478.174518][T21245] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.242839][T21245] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5659: iget: bad i_size value: 360287970189639690
[  478.300295][T21245] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.5659: iget: bad i_size value: 360287970189639690
[  478.360921][T21220] chnl_net:caif_netlink_parms(): no params data found
[  478.446107][  T134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.463549][T12486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.525596][T21269] loop5: detected capacity change from 0 to 512
[  478.564693][T21269] EXT4-fs (loop5): 1 orphan inode deleted
[  478.571065][T21269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.584054][  T388] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  478.610785][T21269] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.631936][T21269] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.5668: iget: bad i_size value: 360287970189639690
[  478.671399][  T134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.692473][T21269] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.5668: iget: bad i_size value: 360287970189639690
[  478.767376][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5667'.
[  478.785853][  T134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.818233][T21284] loop4: detected capacity change from 0 to 512
[  478.828491][T15074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.882366][T21277] loop0: detected capacity change from 0 to 1024
[  478.900908][T21284] EXT4-fs (loop4): 1 orphan inode deleted
[  478.909963][T21277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  478.919407][  T413] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[  478.931279][T21277] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  478.942242][T21277] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  478.952850][T21277] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  478.965421][T21277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  478.991355][T21284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.012955][T21289] loop5: detected capacity change from 0 to 256
[  479.023181][T21284] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.034401][T21277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.044423][  T134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.063676][T21220] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.070873][T21220] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.072395][T21284] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5671: iget: bad i_size value: 360287970189639690
[  479.088391][T21220] bridge_slave_0: entered allmulticast mode
[  479.127633][   T29] kauditd_printk_skb: 657 callbacks suppressed
[  479.127651][   T29] audit: type=1326 audit(1748750722.347:20451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.131324][T21220] bridge_slave_0: entered promiscuous mode
[  479.133994][   T29] audit: type=1326 audit(1748750722.347:20452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.166698][T21220] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.187208][   T29] audit: type=1326 audit(1748750722.347:20453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.194285][T21220] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.217808][   T29] audit: type=1326 audit(1748750722.347:20454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.217855][   T29] audit: type=1326 audit(1748750722.347:20455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.272295][   T29] audit: type=1326 audit(1748750722.347:20456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.296008][   T29] audit: type=1326 audit(1748750722.347:20457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.302999][T21220] bridge_slave_1: entered allmulticast mode
[  479.319723][   T29] audit: type=1326 audit(1748750722.347:20458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.349443][   T29] audit: type=1326 audit(1748750722.347:20459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.373194][   T29] audit: type=1326 audit(1748750722.347:20460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.4.5671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d089e969 code=0x7ffc0000
[  479.401873][T21289] loop5: detected capacity change from 0 to 8192
[  479.409905][T21220] bridge_slave_1: entered promiscuous mode
[  479.496217][T12924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.512334][T21220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.563348][T21298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5674'.
[  479.742130][  T134] bond0 (unregistering): Released all slaves
[  479.751466][  T134] bond1 (unregistering): Released all slaves
[  479.768548][  T134] bond2 (unregistering): Released all slaves
[  479.782047][  T134] bond3 (unregistering): Released all slaves
[  479.797686][T21220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.830677][  T134] tipc: Disabling bearer <eth:vlan0>
[  479.841301][T21318] loop2: detected capacity change from 0 to 256
[  479.848421][  T134] tipc: Left network mode
[  479.861384][T21318] vfat: Unknown parameter 'shor†name'
[  479.972363][T21220] team0: Port device team_slave_0 added
[  480.000719][T21220] team0: Port device team_slave_1 added
[  480.035187][  T134] hsr_slave_0: left promiscuous mode
[  480.042784][  T134] hsr_slave_1: left promiscuous mode
[  480.053638][  T134] veth1_macvtap: left promiscuous mode
[  480.063754][  T134] veth0_macvtap: left promiscuous mode
[  480.132202][T21335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21335 comm=syz.5.5678
[  480.157361][  T134] veth1_vlan: left promiscuous mode
[  480.165957][  T134] veth0_vlan: left promiscuous mode
[  480.970214][T21342] loop2: detected capacity change from 0 to 512
[  480.992269][T21342] ext4: Unknown parameter 'subj_type'
[  481.131557][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5683'.
[  481.140607][T21355] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5683'.
[  481.149800][T21355] netlink: 'syz.2.5683': attribute type 3 has an invalid length.
[  481.157560][T21355] netlink: 'syz.2.5683': attribute type 2 has an invalid length.
[  481.220599][T21220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.227624][T21220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.253645][T21220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.274602][T21220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.281598][T21220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.307809][T21220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.341459][T21367] FAULT_INJECTION: forcing a failure.
[  481.341459][T21367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.354738][T21367] CPU: 0 UID: 0 PID: 21367 Comm: +}[@ Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) 
[  481.354771][T21367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  481.354801][T21367] Call Trace:
[  481.354808][T21367]  <TASK>
[  481.354816][T21367]  __dump_stack+0x1d/0x30
[  481.354839][T21367]  dump_stack_lvl+0xe8/0x140
[  481.354865][T21367]  dump_stack+0x15/0x1b
[  481.354887][T21367]  should_fail_ex+0x265/0x280
[  481.354929][T21367]  should_fail+0xb/0x20
[  481.355016][T21367]  should_fail_usercopy+0x1a/0x20
[  481.355036][T21367]  _copy_to_user+0x20/0xa0
[  481.355059][T21367]  simple_read_from_buffer+0xb5/0x130
[  481.355102][T21367]  proc_fail_nth_read+0x100/0x140
[  481.355171][T21367]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  481.355227][T21367]  vfs_read+0x19d/0x6f0
[  481.355490][T21367]  ? __rcu_read_unlock+0x4f/0x70
[  481.355520][T21367]  ? __fget_files+0x184/0x1c0
[  481.355546][T21367]  ksys_read+0xda/0x1a0
[  481.355612][T21367]  __x64_sys_read+0x40/0x50
[  481.355638][T21367]  x64_sys_call+0x2d77/0x2fb0
[  481.355666][T21367]  do_syscall_64+0xd2/0x200
[  481.355700][T21367]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  481.355797][T21367]  ? clear_bhb_loop+0x40/0x90
[  481.355878][T21367]  ? clear_bhb_loop+0x40/0x90
[  481.355906][T21367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.355933][T21367] RIP: 0033:0x7fecabc1d37c
[  481.355954][T21367] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  481.356036][T21367] RSP: 002b:00007fecaa287030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  481.356060][T21367] RAX: ffffffffffffffda RBX: 00007fecabe45fa0 RCX: 00007fecabc1d37c
[  481.356076][T21367] RDX: 000000000000000f RSI: 00007fecaa2870a0 RDI: 0000000000000005
[  481.356092][T21367] RBP: 00007fecaa287090 R08: 0000000000000000 R09: 0000000000000000
[  481.356108][T21367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.356124][T21367] R13: 0000000000000000 R14: 00007fecabe45fa0 R15: 00007fff9821c588
[  481.356149][T21367]  </TASK>
[  481.357230][T21336] lo speed is unknown, defaulting to 1000
[  481.569121][T21336] lo speed is unknown, defaulting to 1000
[  481.575096][T21369] siw: device registration error -23
[  481.590975][T21220] hsr_slave_0: entered promiscuous mode
[  481.599939][T21220] hsr_slave_1: entered promiscuous mode
[  481.836595][T21382] loop5: detected capacity change from 0 to 8192
[  481.989712][T21401] __nla_validate_parse: 2 callbacks suppressed
[  481.989727][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5694'.
[  482.046166][T21408] loop4: detected capacity change from 0 to 1024
[  482.077852][T21408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  482.100298][T21408] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  482.111376][T21408] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  482.138024][T21408] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  482.170383][T21408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  482.191834][T21408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.227006][  T134] IPVS: stop unused estimator thread 0...
[  482.289425][T21220] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  482.333224][T21220] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  482.357087][T21220] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  482.378641][T21220] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  482.477455][T21447] loop4: detected capacity change from 0 to 512
[  482.506272][T21220] 8021q: adding VLAN 0 to HW filter on device bond0
[  482.517006][T21446] loop0: detected capacity change from 0 to 1024
[  482.534943][T21220] 8021q: adding VLAN 0 to HW filter on device team0
[  482.550989][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.558121][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.578324][T21446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  482.598475][T21446] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  482.632778][T21446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  482.634257][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.648068][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  482.655426][T21447] EXT4-fs (loop4): 1 orphan inode deleted
[  482.662165][T21465] FAULT_INJECTION: forcing a failure.
[  482.662165][T21465] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  482.675509][T21465] CPU: 1 UID: 0 PID: 21465 Comm: syz.2.5710 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) 
[  482.675543][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  482.675569][T21465] Call Trace:
[  482.675576][T21465]  <TASK>
[  482.675584][T21465]  __dump_stack+0x1d/0x30
[  482.675610][T21465]  dump_stack_lvl+0xe8/0x140
[  482.675631][T21465]  dump_stack+0x15/0x1b
[  482.675692][T21465]  should_fail_ex+0x265/0x280
[  482.675728][T21465]  should_fail_alloc_page+0xf2/0x100
[  482.675783][   T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[  482.675920][T21465] ==================================================================
[  482.675967][T21465] BUG: KCSAN: data-race in data_alloc / prb_reserve
[  482.676027][T21465] 
[  482.676034][T21465] write to 0xffffffff86887990 of 8 bytes by task 37 on cpu 0:
[  482.676056][T21465]  data_alloc+0x27d/0x2b0
[  482.676103][T21465]  prb_reserve+0x808/0xaf0
[  482.676141][T21465]  vprintk_store+0x56d/0x860
[  482.676164][T21465]  vprintk_emit+0x178/0x650
[  482.676187][T21465]  vprintk_default+0x26/0x30
[  482.676211][T21465]  vprintk+0x1d/0x30
[  482.676242][T21465]  _printk+0x79/0xa0
[  482.676278][T21465]  __ext4_error+0x248/0x320
[  482.676307][T21465]  ext4_release_dquot+0x2e7/0x460
[  482.676343][T21465]  quota_release_workfn+0x256/0x530
[  482.676374][T21465]  process_scheduled_works+0x4cb/0x9d0
[  482.676413][T21465]  worker_thread+0x582/0x770
[  482.676452][T21465]  kthread+0x489/0x510
[  482.676476][T21465]  ret_from_fork+0xda/0x150
[  482.676502][T21465]  ret_from_fork_asm+0x1a/0x30
[  482.676531][T21465] 
[  482.676538][T21465] read to 0xffffffff86887990 of 8 bytes by task 21465 on cpu 1:
[  482.676558][T21465]  prb_reserve+0x221/0xaf0
[  482.676597][T21465]  vprintk_store+0x56d/0x860
[  482.676619][T21465]  vprintk_emit+0x178/0x650
[  482.676642][T21465]  vprintk_default+0x26/0x30
[  482.676665][T21465]  vprintk+0x1d/0x30
[  482.676696][T21465]  _printk+0x79/0xa0
[  482.676733][T21465]  show_trace_log_lvl+0x4e3/0x560
[  482.676763][T21465]  __dump_stack+0x1d/0x30
[  482.676785][T21465]  dump_stack_lvl+0xe8/0x140
[  482.676808][T21465]  dump_stack+0x15/0x1b
[  482.676830][T21465]  should_fail_ex+0x265/0x280
[  482.676870][T21465]  should_fail_alloc_page+0xf2/0x100
[  482.676899][T21465]  __alloc_frozen_pages_noprof+0xff/0x360
[  482.676941][T21465]  alloc_pages_mpol+0xb3/0x250
[  482.676979][T21465]  vma_alloc_folio_noprof+0x1aa/0x300
[  482.677019][T21465]  handle_mm_fault+0xe9f/0x2c00
[  482.677043][T21465]  do_user_addr_fault+0x636/0x1090
[  482.677118][T21465]  exc_page_fault+0x62/0xa0
[  482.677144][T21465]  asm_exc_page_fault+0x26/0x30
[  482.677171][T21465] 
[  482.677176][T21465] value changed: 0x0000000000026c38 -> 0x00000000000e3b68
[  482.677191][T21465] 
[  482.677196][T21465] Reported by Kernel Concurrency Sanitizer on:
[  482.677210][T21465] CPU: 1 UID: 0 PID: 21465 Comm: syz.2.5710 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(voluntary) 
[  482.677247][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  482.677264][T21465] ==================================================================
[  482.675753][T21465]  __alloc_frozen_pages_noprof+0xff/0x360
[  482.677306][T21465]  alloc_pages_mpol+0xb3/0x250
[  482.677363][T21465]  vma_alloc_folio_noprof+0x1aa/0x300
[  482.677409][T21465]  handle_mm_fault+0xe9f/0x2c00
[  482.677440][T21465]  ? mas_walk+0xf2/0x120
[  482.677512][T21465]  do_user_addr_fault+0x636/0x1090
[  482.677561][T21465]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  482.677653][T21465]  exc_page_fault+0x62/0xa0
[  482.677682][T21465]  asm_exc_page_fault+0x26/0x30
[  482.677709][T21465] RIP: 0033:0x7f6d9e66bf6b
[  482.677726][T21465] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  482.677744][T21465] RSP: 002b:00007f6d9cd24e10 EFLAGS: 00010246
[  482.677773][T21465] RAX: 00007f6d9cd26f30 RBX: 00007f6d9e8b3620 RCX: 0000000000000000
[  482.677791][T21465] RDX: 00007f6d9cd26f78 RSI: 00007f6d9e71dbf8 RDI: 00007f6d9cd24e30
[  482.677809][T21465] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  482.677826][T21465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.677843][T21465] R13: 0000000000000000 R14: 00007f6d9e8e5fa0 R15: 00007ffcb4cf6f68
[  482.677937][T21465]  </TASK>
[  482.677951][T21465] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  482.696074][T21447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.731852][T21220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  482.820229][T21447] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  482.822973][T21220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  482.909389][T21446] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.5707: lblock 2 mapped to illegal pblock 2 (length 1)
[  482.937589][T21447] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.5705: iget: bad i_size value: 360287970189639690
[  482.952069][T21446] EXT4-fs (loop0): Remounting filesystem read-only
[  483.186493][T21467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21467 comm=syz.5.5709
[  483.347370][T12924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.451027][T21446] EXT4-fs (loop0): 1 orphan inode deleted
[  483.457657][T21446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.480424][T21446] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.535559][T21220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.640892][T21220] veth0_vlan: entered promiscuous mode
[  483.649851][T21220] veth1_vlan: entered promiscuous mode
[  483.673369][T21220] veth0_macvtap: entered promiscuous mode
[  483.680583][T21220] veth1_macvtap: entered promiscuous mode
[  483.691782][T21220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.709322][T21220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.719613][T21220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.728477][T21220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.737388][T21220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.746323][T21220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0