last executing test programs:

2m41.422388797s ago: executing program 2 (id=380):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008005d1b3e38812d9b9d73581a3ed386837d013f6a29462eb54a47339300736974001400028006000e000010000008000300ac1414bb7f566603e45044ca49c8fad9af0229773f07e4de1534096c81a91c8ecbb3fa111a27f6e0956309925d1696b0d78df707b3c12e4f260ec0045a2a6ef29367482c6f3a46aa60f7e0004f6985599f3d1b62dbd366d1e9f5baf0d87d4a08ee7071d0ba8b773e169ef9d527389d72daa4bf1131cb8a0bec2256310dd0b70f63648414e136ba200c2d03286da4b2fdf68a74304bfc2a153500d1285b"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', <r4=>0x0, 0x8000, 0x7, 0x2, 0x6, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @loopback, {[@end]}}}}})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000700)={0x8, 0x3, "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"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r6, 0x0, 0xcf, 0x0, &(0x7f00000001c0))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x1000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10)
setrlimit(0x40000000000008, &(0x7f0000000000))
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@newtclass={0x30, 0x28, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x9, 0xe}, {0x0, 0xfff2}, {0x4, 0x7}}, [@tclass_kind_options=@c_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x40004)

2m41.31508878s ago: executing program 2 (id=381):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/kexec_crash_size', 0x80100, 0x108)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
rt_sigprocmask(0x0, &(0x7f0000000480)={[0x400]}, 0x0, 0x8)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
getrlimit(0x6, &(0x7f0000000740))
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0xfffffffc, 0x0, 0x12, 0x11, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe1085905000100000000000000b420a9c81f40f05f819e01177d3d458dac00000000000000800000003b00f1ffffffffffff01000040000000000002", "90be8b1c5512406c7f00", [0x8, 0x3fffffffffffff]}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f00000001c0)=0x8)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, 0x0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)

2m40.858365848s ago: executing program 2 (id=390):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 2)

2m40.431896697s ago: executing program 2 (id=392):
r0 = socket(0x2, 0x80805, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x33c, &(0x7f0000000340)="$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")
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getpid()
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="0f000000000000000a004e2100000009fe80000000000000000000000000001c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000040000000a004e2200000009fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000000300000000000000000000ffffac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000d56fe8000000000000000000000000000bb006e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000000d200100000000000000000000000000010200"/645], 0x290)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80f00, 0x160)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1345, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee0000000000000004c988a8", 0xe}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
setreuid(0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe)
ptrace(0x11, r6)
unshare(0x2040d00)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

2m40.25356137s ago: executing program 2 (id=394):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa)
mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, 0x0)
sendto(r0, &(0x7f00000005c0)="a1695339d8cfbc19bbbbdb77797326193252c0e9aafef7c3e1225dbf1186424ee9d8f749e6a8b28a6de4d2feb06a34a80936f618b63ebcf5d3f21fa3a4b901b748aa0bc4fd6b0f61d0dddb35b50ba6f52cdba9b979b9e4a8d010e5c50d4412e0c95254870bd4c567d5c9e391fb601c4c6df129f93e5dc494edea6ed64d59652e8a278480a97db80fcb7ccd78", 0x8c, 0x40440c1, 0x0, 0x0) (async)
sendto(r0, &(0x7f00000005c0)="a1695339d8cfbc19bbbbdb77797326193252c0e9aafef7c3e1225dbf1186424ee9d8f749e6a8b28a6de4d2feb06a34a80936f618b63ebcf5d3f21fa3a4b901b748aa0bc4fd6b0f61d0dddb35b50ba6f52cdba9b979b9e4a8d010e5c50d4412e0c95254870bd4c567d5c9e391fb601c4c6df129f93e5dc494edea6ed64d59652e8a278480a97db80fcb7ccd78", 0x8c, 0x40440c1, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18)
r3 = getpgrp(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x3}, 0x18)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ptrace$getregs(0xe, r3, 0x2, &(0x7f0000001340)=""/105)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x184, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x170, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x100, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x5, 0x3, 0x8, 0x9}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xb1, 0x6, "cf1a970643c23fbbd8afd678b05d6ea49de82509d80580171c02b16ff1e4e2cdd623be6973a9c6a2ca78b66186c21e7bf0513acb033e052c704cfe4d7acb45c11ab25438bafac72d69d469ce9109ad6b8652ebdd6e08d978aeaf8c94716164ee1fd28f0a9c8cde7e99d3b7f043e8f7a4423086762cec3d1827284d7c0a27995489d7a775c69ebdb9a26cf1710b0eedc2002125787c64d2168285c40d23ca8d0094158d89791ce8cab411feb76c"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x184}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x184, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x170, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x100, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x5, 0x3, 0x8, 0x9}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xb1, 0x6, "cf1a970643c23fbbd8afd678b05d6ea49de82509d80580171c02b16ff1e4e2cdd623be6973a9c6a2ca78b66186c21e7bf0513acb033e052c704cfe4d7acb45c11ab25438bafac72d69d469ce9109ad6b8652ebdd6e08d978aeaf8c94716164ee1fd28f0a9c8cde7e99d3b7f043e8f7a4423086762cec3d1827284d7c0a27995489d7a775c69ebdb9a26cf1710b0eedc2002125787c64d2168285c40d23ca8d0094158d89791ce8cab411feb76c"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x184}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
io_setup(0xa, &(0x7f00000003c0)) (async)
io_setup(0xa, &(0x7f00000003c0)=<r9=>0x0)
io_submit(r9, 0x2, &(0x7f0000000680)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x4, r4, &(0x7f00000004c0)="bd846a24a0bfceb2cd01e9dcbe6ec122fa5294f80fa1f5f403e3e515b551c132ee869d40a20208e5f114f2584ff4acd9c5dc421e0c118e3af12e81c70b35f0a7670d1de2ca545cf6ea6d773540feda25783f2d2be33fc89a2e789370586d466435572ffdd3f75e3f00b18b81e68aca0e3f6797deb8c3d8519844f167168ac2aae0de898bb361709d04597ef629abcea515e180c3f3548b4ffaaaffa43f0cab0da7d4705e1625d353995a75fff2d992aa449fbc0275a6c33035d4fb4981a82722a3b7798ef1ec395d4e5b0a92", 0xcc, 0x3, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x3b, r6, &(0x7f0000001440)="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", 0x1000, 0x6, 0x0, 0x3, r5}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r10}, 0x10)
r11 = syz_io_uring_setup(0x313f, &(0x7f0000000340)={0x0, 0xe85d, 0x2, 0x2, 0x10000}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r6, 0x0, 0x7}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r6, 0x0, 0x7}, 0x18)
io_uring_register$IORING_REGISTER_RING_FDS(r11, 0x14, &(0x7f00000012c0)=[{0x5, 0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/130, 0x82}, {&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000000a80)=""/79, 0x4f}, {&(0x7f0000000b00)=""/217, 0xd9}, {&(0x7f0000000c00)=""/90, 0x5a}], &(0x7f0000000d00)=[0x8, 0x7, 0x663d, 0x7, 0x7, 0xa, 0x5, 0x8, 0x8, 0x200000000000]}, {0x1, 0x1, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/235, 0xeb}], &(0x7f0000000ec0)=[0xffff, 0x973, 0x7fffffff, 0x0, 0x6656, 0x4]}, {0x7, 0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f00)=""/100, 0x64}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000001080)=""/250, 0xfa}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/82, 0x52}, {&(0x7f0000001180)=""/192, 0xc0}], &(0x7f0000001000)=[0x1, 0x7fff, 0x7, 0xfffffffffffffff8, 0x7, 0x7]}], 0x3)

2m39.854862788s ago: executing program 2 (id=400):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x8, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x44, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0x20aaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0)

2m39.848042478s ago: executing program 32 (id=400):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x8, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x44, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0x20aaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0)

3.09635246s ago: executing program 1 (id=2181):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x1}]}}}}}}}, 0x0)
r4 = timerfd_create(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
timerfd_gettime(r4, &(0x7f0000000300))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x42, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8", 0xe}], 0x1)
pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)

2.729916387s ago: executing program 3 (id=2182):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (fail_nth: 1)

2.674853378s ago: executing program 3 (id=2183):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x55954c279cd8c010, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f00000003c0)='./file0\x00', 0x1)

2.59246726s ago: executing program 3 (id=2185):
socket$key(0xf, 0x3, 0x2)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2509000000840004801300010062726f6164636173742d6c696e6b00004c00078008000400070000000800020082b00000080001000200000008000400d538004008000300010001000800040007000000080002000300000008000400040000000800030005"], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80)
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c04000700800007", 0x23)

2.545752981s ago: executing program 5 (id=2187):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r0, 0x0, 0x2}, 0x18)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x1)
mkdirat(r1, &(0x7f0000000300)='./bus\x00', 0x0)
renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, 0x0, 0x0)

2.386365344s ago: executing program 1 (id=2190):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6a)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)

2.386050254s ago: executing program 3 (id=2191):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xf4, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

2.385650194s ago: executing program 5 (id=2192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$notify(r0, 0x402, 0x5fa1d7d8671e9bd1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001740)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x7, 0x1, 0x1020}]}]}, 0x20}}, 0x20004810)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='kmem_cache_free\x00', r10, 0x0, 0x4ee}, 0x18)
sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004)

2.329628785s ago: executing program 3 (id=2193):
socket(0x1d, 0x2, 0x6)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x51, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000005)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="020b000302cd00002cbd7000fcdbdf25"], 0x10}, 0x1, 0x7}, 0x0)

2.286258676s ago: executing program 5 (id=2194):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x5, 0x100000)

2.280798126s ago: executing program 4 (id=2195):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000700)={{0x0, 0xe, 0x5, 0x9f, 0x8, 0x10001, 0x4, 0x6, 0x8, 0x2, 0xb4, 0xa, 0x0, 0x7, 0x7f}})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r4)
sendmmsg$unix(r3, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_usb_disconnect(r6)

2.172934268s ago: executing program 5 (id=2196):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x15, 0x5, 0x8, 0xffffffff, 0x0, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x80000000)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x90, 0x0, 0x0)
bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff)

1.999992031s ago: executing program 1 (id=2197):
r0 = syz_io_uring_setup(0x4841, &(0x7f0000000100)={0x0, 0x34f, 0x40, 0x0, 0x1cb}, &(0x7f0000000300), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000980)={0xa, 0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/48, 0x30}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/112, 0x70}, {&(0x7f0000000640)=""/15, 0xf}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/79, 0x4f}], &(0x7f0000000680)=[0x200, 0x2, 0x5, 0x8, 0xfffffffffffffffb, 0x9, 0x5]}, 0x20)

1.921855833s ago: executing program 1 (id=2198):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a0f00000000000000000000000000000000000027b55e6fc359013c9da570ad71457e9bb84111b5a46a9bfb0ebffde7091ae657aae1af50a5ec077d0172260c43abe1fe1ea774e7b2acd7f5e9dcb61426c81a9c18b2afbe03eec7b31cf3037f3544a831da494fc867914b6b2228de3fc1cd03fdc1a749688a1fc601637dbd740c28fa0b0555ee8684d8d74ead5ddd1627d685", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket(0x4000000000c, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880))
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000740)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x1de, &(0x7f0000000600)=[{&(0x7f0000000500)=""/241, 0xf1}], 0x1, 0x1})
fsetxattr$security_evm(r2, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "0ba0839ae2e43696f798bfac1d7656390e91bdc7"}, 0x15, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="0000010000000000000000007c726498eb63946f8a44c00000000098000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x30, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf2b6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x65}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @generic={0x3, 0xf, 0x4, 0xd, 0x101}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @alu={0x4, 0x1, 0xb, 0x4, 0x3, 0xfffffffffffffff4, 0x10}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000380)={{0x81, 0x8}, 'port0\x00', 0x0, 0x8, 0x5, 0x30000, 0x401, 0x8, 0xa, 0x0, 0x2, 0x2})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000180)}, 0x10)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7fffffff}]}}]}, 0x98}}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

1.845251934s ago: executing program 1 (id=2199):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b0a03178270edb8a240772a774ef7e2f88af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x56, 0x6000, @fd_index=0x7, 0x3, 0x3c46, 0x22, 0x8, 0x0, {0x2}})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400009abad80000000000000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250d000000050038000100000008002b000000000005002f000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x2404c0c4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x200000ffc000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0xdaf3}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000080}, 0x10000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")

1.507307171s ago: executing program 4 (id=2201):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_read_part_table(0x104b, &(0x7f00000013c0)="$eJzsz80JwkAYBNBZN5rszWY8iWAT9qPt2IIInqxLkoA/BYgI7112GAaWL/zU9t6SunoV66TWKZUki/Etye6SDMPYHluWm/RJutzmwXM9OSWpSXur0pX9dU79x++H8zdvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/8QgAAP//uX0GXg==")

1.347016564s ago: executing program 4 (id=2202):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x4140, 0xe6, 0x8}, 0x18)

1.334905764s ago: executing program 5 (id=2203):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xf4, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

1.233946596s ago: executing program 4 (id=2204):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$notify(r0, 0x402, 0x5fa1d7d8671e9bd1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001740)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x7, 0x1, 0x1020}]}]}, 0x20}}, 0x20004810)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='kmem_cache_free\x00', r10, 0x0, 0x4ee}, 0x18)
sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004)

1.179954108s ago: executing program 4 (id=2205):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/kexec_crash_size', 0x80100, 0x108)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
rt_sigprocmask(0x0, &(0x7f0000000480)={[0x400]}, 0x0, 0x8)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
getrlimit(0x6, &(0x7f0000000740))
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0xfffffffc, 0x0, 0x12, 0x11, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe1085905000100000000000000b420a9c81f40f05f819e01177d3d458dac00000000000000800000003b00f1ffffffffffff01000040000000000002", "90be8b1c5512406c7f00", [0x8, 0x3fffffffffffff]}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f00000001c0)=0x8)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, 0x0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)

1.109177439s ago: executing program 5 (id=2207):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000000380)=""/111, &(0x7f0000000580)="598613ad03de6107aa3b2481e99b4b9a7bbaac12f8b791fd25990484a1ddffdfb0eb2ec559b71cbb8071fdc2034c03ec5605a3b4696098120eab36661f0fe3305f77842e4b6dc56597a9da1b6950811bcbe87d9d055dc0945bc5d6a8b2ed47cf30f38e3abf857ab3296a9152b8ea85b29310220449e7962629d5041ab38b987eeeeeebd90b03f6f4ebe78c1056b1b0fa520007572839a1a465f55d03b2a15eed497a7c3652b9eba49c174bbb5bffe7ade4ba3b3aec1ddcffadfa33ca2fa0a21e35a3da7264509420aace0f1949127dc5ad0a1cd4c0cdaef7389f119c1fbe7c10581fcc113465df54edeaf9ffed", &(0x7f0000000800)="6cdf76d9151071e9fd846aec44d132d978146c03a5e93898283fd3e9d4a437baf9866e095cd0b1e328dc3acd6738b19a56a4a47c5a7d207a54c5fd4aefd340d0118c166a5b5a697450705c135b7ae29587b7333eea0f161315ece2256caa0ac64666b135be60e8905b981a4502f0ae7aa812d8e5133f2f05c2bd991ceae7d6be5ea2e7424889b2a269f5122e209e3876d6a215e165a91b8b67564a9b5f7165ba95f603da0fc85a89634c324d70bb23a60cbf8d0dcac87299be65f4e2985bef42c49919068d7149540b47d046bcbfd6afc943753249e9ac2af9211c921a4ccd7b", 0x5, r2}, 0x38)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffc)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8, 0x1)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6, 0x0, 0x8000000000000000}, 0x18)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
r7 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))

807.188495ms ago: executing program 0 (id=2211):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
readv(r2, &(0x7f00000016c0)=[{&(0x7f0000001200)=""/147, 0x93}], 0x1)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"})
r3 = syz_open_pts(r2, 0x42)
r4 = dup3(r3, r2, 0x0)
write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

747.082986ms ago: executing program 3 (id=2212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8)
r2 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000, 0x0, r1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}})
io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedreceive(r7, &(0x7f000001d600)=""/102378, 0x18fea, 0x3, 0x0)

743.586206ms ago: executing program 0 (id=2213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/14], 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x310)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
socket$packet(0x11, 0xa, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
link(&(0x7f0000000380)='./cgroup\x00', &(0x7f00000003c0)='./cgroup/file0\x00')
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3ed7, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x2)

456.989941ms ago: executing program 4 (id=2214):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0, 0x0, 0x8}, 0x18)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000040), 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r4, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa048ac44c63ed287a665f2c34b9e2278e78aaae0b120c255ab10ea38b054ba09f60ad3c2bf21e965b71d8eb98bc84eed4f0bd3328057355205890abf0e68f3ebc151dd697ab4a22a73f621c6ea0e69273df84fe8b7be01000000000000", 0x93)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7fffeffd)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x2, 0x240080e4)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0)
sendto$x25(r9, &(0x7f0000000180)="690102c8dbd30e0fcd7e092028a205dcca73ad412ec82d4aa8e3a307e6d966def9a9622d8c8ad8ca8deea773c8bcbef8a7308e628d14f58bd8d3cf881f0b6ddf9891555c6ba46f", 0x47, 0x4850, &(0x7f00000002c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)

404.634153ms ago: executing program 0 (id=2215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$notify(r0, 0x402, 0x5fa1d7d8671e9bd1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001740)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x7, 0x1, 0x1020}]}]}, 0x20}}, 0x20004810)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='kmem_cache_free\x00', r10, 0x0, 0x4ee}, 0x18)
sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004)

290.944225ms ago: executing program 0 (id=2216):
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)

156.469817ms ago: executing program 0 (id=2217):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xf4, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

73.332539ms ago: executing program 0 (id=2218):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = dup(r3)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000004c0)={<r5=>0x0, 0x4, 0x7})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=<r8=>r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket(0x11, 0x2, 0x0)
setsockopt(r9, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
setsockopt(r9, 0x107, 0x2, &(0x7f00000001c0)="110000000100060000071a800100", 0xe)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r10=>0x0}, {0x0, @usage, <r11=>0x0}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRESOCT=r10, @ANYRES16=r8, @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000a00)={<r12=>0x0, "a1806a184ff2713487fefe8ee7d71aaf"})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001a00)={0x1, 0x1, {0x8, @struct={0x60, 0x4}, r5, 0x1, 0x5, 0x2, 0x4, 0x7, 0x0, @usage=0x40, 0x1b60, 0x3, [0x7f, 0x10000, 0x1, 0x6, 0x3, 0x2]}, {0xffffffffffff7789, @usage=0x5, r10, 0x0, 0xc530, 0x1, 0x7, 0x7ff, 0x2, @usage=0x1, 0x4, 0x9, [0x3, 0x9, 0x0, 0x2, 0xfffffffffffffffa, 0xa3]}, {0x9, @usage=0x51b1, r12, 0xd, 0xe, 0x1, 0x3, 0x7, 0x8, @usage=0x6de, 0x4, 0x800, [0xd1d, 0x9274, 0x2, 0x7, 0x6, 0x70c2]}, {0x0, 0xfffffffffffffffb, 0x8000000000000000}})
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x1}, &(0x7f0000000480)=0x8)
openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x4140, 0xe6, 0x8}, 0x18)

0s ago: executing program 1 (id=2219):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)
r5 = dup(r2)
sendfile(r5, r1, 0x0, 0x8000fffffffc)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r6}, 0x18)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8, 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7, 0x0, 0x8000000000000000}, 0x18)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
r8 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))

kernel console output (not intermixed with test programs):

o_update_inode:5653: inode #16: comm syz.4.1815: corrupted inode contents
[  201.586141][T10185] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1814: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.601085][T10198] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1815: mark_inode_dirty error
[  201.612467][T10198] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  201.625422][T10185] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1814: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.641845][T10198] EXT4-fs (loop4): 1 truncate cleaned up
[  201.657950][T10198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.676917][T10198] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.696430][T10223] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1814: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.711819][T10223] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1814: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.733597][T10198] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.745525][T10232] loop0: detected capacity change from 0 to 512
[  201.752490][T10223] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.1814: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.753588][T10232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  201.811365][T10232] EXT4-fs (loop0): 1 truncate cleaned up
[  201.818225][T10232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.949532][T10235] loop3: detected capacity change from 0 to 164
[  201.959462][T10235] syz.3.1821: attempt to access beyond end of device
[  201.959462][T10235] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  201.973347][T10235] syz.3.1821: attempt to access beyond end of device
[  201.973347][T10235] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  202.133462][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1823'.
[  202.160720][T10243] loop4: detected capacity change from 0 to 1024
[  202.192533][T10232] random: crng reseeded on system resumption
[  202.205326][T10243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.243464][T10250] loop5: detected capacity change from 0 to 1024
[  202.295783][T10250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.345435][T10250] FAULT_INJECTION: forcing a failure.
[  202.345435][T10250] name failslab, interval 1, probability 0, space 0, times 0
[  202.358234][T10250] CPU: 0 UID: 0 PID: 10250 Comm: syz.5.1827 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  202.358283][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  202.358366][T10250] Call Trace:
[  202.358372][T10250]  <TASK>
[  202.358381][T10250]  __dump_stack+0x1d/0x30
[  202.358403][T10250]  dump_stack_lvl+0xe8/0x140
[  202.358421][T10250]  dump_stack+0x15/0x1b
[  202.358435][T10250]  should_fail_ex+0x265/0x280
[  202.358455][T10250]  should_failslab+0x8c/0xb0
[  202.358487][T10250]  kmem_cache_alloc_noprof+0x50/0x310
[  202.358597][T10250]  ? audit_log_start+0x365/0x6c0
[  202.358627][T10250]  audit_log_start+0x365/0x6c0
[  202.358727][T10250]  audit_seccomp+0x48/0x100
[  202.358759][T10250]  ? __seccomp_filter+0x68c/0x10d0
[  202.358782][T10250]  __seccomp_filter+0x69d/0x10d0
[  202.358803][T10250]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  202.358895][T10250]  ? vfs_write+0x7e8/0x960
[  202.358921][T10250]  __secure_computing+0x82/0x150
[  202.358941][T10250]  syscall_trace_enter+0xcf/0x1e0
[  202.359055][T10250]  do_syscall_64+0xac/0x200
[  202.359086][T10250]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  202.359138][T10250]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  202.359171][T10250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.359192][T10250] RIP: 0033:0x7fad7387ebe9
[  202.359205][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.359227][T10250] RSP: 002b:00007fad722df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb
[  202.359243][T10250] RAX: ffffffffffffffda RBX: 00007fad73ab5fa0 RCX: 00007fad7387ebe9
[  202.359331][T10250] RDX: 000000000000ee00 RSI: ffffffff80000301 RDI: 0000000000000004
[  202.359347][T10250] RBP: 00007fad722df090 R08: 0000000000000000 R09: 0000000000000000
[  202.359361][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.359378][T10250] R13: 00007fad73ab6038 R14: 00007fad73ab5fa0 R15: 00007fff0ea279f8
[  202.359401][T10250]  </TASK>
[  202.361712][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.568630][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.579323][ T8881] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  202.580766][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.591690][ T8881] EXT4-fs (loop1): This should not happen!! Data will be lost
[  202.591690][ T8881] 
[  202.602094][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  202.732128][T10266] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  202.741618][T10266] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32
[  202.861586][T10269] loop3: detected capacity change from 0 to 8192
[  202.886944][T10273] loop5: detected capacity change from 0 to 164
[  203.058028][T10269]  loop3: p2
[  203.061356][T10269] loop3: p2 start 150994947 is beyond EOD, truncated
[  203.210129][T10280] loop3: detected capacity change from 0 to 8192
[  203.280997][T10280]  loop3: p2
[  203.284499][T10280] loop3: p2 start 150994947 is beyond EOD, truncated
[  203.832619][T10289] lo speed is unknown, defaulting to 1000
[  203.839590][T10289] lo speed is unknown, defaulting to 1000
[  203.845449][T10289] lo speed is unknown, defaulting to 1000
[  203.851697][T10289] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  203.859165][T10289] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  203.870052][T10289] lo speed is unknown, defaulting to 1000
[  203.876497][T10289] lo speed is unknown, defaulting to 1000
[  203.882805][T10289] lo speed is unknown, defaulting to 1000
[  203.888997][T10289] lo speed is unknown, defaulting to 1000
[  203.895488][T10289] lo speed is unknown, defaulting to 1000
[  203.902372][T10289] lo speed is unknown, defaulting to 1000
[  203.908724][T10289] lo speed is unknown, defaulting to 1000
[  203.920173][T10289] smc: removing ib device syz!
[  204.171531][T10296] loop3: detected capacity change from 0 to 128
[  204.178211][T10296] msdos: Unknown parameter 'nodotæ\tz'
[  204.257100][T10294] loop5: detected capacity change from 0 to 8192
[  204.277431][T10297] loop1: detected capacity change from 0 to 164
[  204.283154][T10295] lo speed is unknown, defaulting to 1000
[  204.290651][T10297] syz.1.1840: attempt to access beyond end of device
[  204.290651][T10297] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  204.309987][T10301] loop4: detected capacity change from 0 to 512
[  204.322072][T10301] EXT4-fs: Ignoring removed orlov option
[  204.344865][T10301] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  204.354187][T10297] syz.1.1840: attempt to access beyond end of device
[  204.354187][T10297] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  204.378201][T10301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  204.388231][   T29] kauditd_printk_skb: 284 callbacks suppressed
[  204.388269][   T29] audit: type=1401 audit(1757100620.015:14357): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  204.389696][T10301] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1845: corrupted in-inode xattr: e_value size too large
[  204.426328][T10301] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1845: couldn't read orphan inode 15 (err -117)
[  204.439144][T10301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.451221][   T29] audit: type=1326 audit(1757100620.067:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.451258][   T29] audit: type=1326 audit(1757100620.067:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.451286][   T29] audit: type=1326 audit(1757100620.067:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.522073][   T29] audit: type=1326 audit(1757100620.067:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.545727][   T29] audit: type=1326 audit(1757100620.067:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.569360][   T29] audit: type=1326 audit(1757100620.067:14363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.592851][   T29] audit: type=1326 audit(1757100620.067:14364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.616593][   T29] audit: type=1326 audit(1757100620.067:14365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  204.696275][   T29] audit: type=1326 audit(1757100620.288:14366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.5.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  205.115444][T10328] loop5: detected capacity change from 0 to 512
[  205.126070][T10328] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  205.150393][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.160656][T10328] EXT4-fs (loop5): 1 truncate cleaned up
[  205.166796][T10328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.221990][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1854'.
[  205.231523][T10328] random: crng reseeded on system resumption
[  205.245589][T10334] loop4: detected capacity change from 0 to 8192
[  205.301429][T10336] loop4: detected capacity change from 0 to 128
[  205.343829][T10336] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.363019][T10336] ext4 filesystem being mounted at /330/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  205.374986][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.421820][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.430536][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.441717][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.450458][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.459654][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.468260][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.478355][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.486920][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.595360][T10355] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  205.644950][T10355] tipc: Started in network mode
[  205.649967][T10355] tipc: Node identity ac141427, cluster identity 4711
[  205.658708][T10355] tipc: Enabled bearer <udp:syz0>, priority 10
[  205.804699][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.839719][T10372] loop3: detected capacity change from 0 to 512
[  205.846528][T10372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  205.858297][T10372] EXT4-fs (loop3): 1 truncate cleaned up
[  205.864329][T10370] loop4: detected capacity change from 0 to 8192
[  205.864448][T10372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.903872][T10376] loop4: detected capacity change from 0 to 128
[  205.906920][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1869'.
[  205.920144][T10372] random: crng reseeded on system resumption
[  205.940766][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.989303][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1870'.
[  206.034260][T10378] loop3: detected capacity change from 0 to 512
[  206.046155][T10378] EXT4-fs: Ignoring removed nobh option
[  206.071597][T10378] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1871: corrupted inode contents
[  206.084920][T10378] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1871: mark_inode_dirty error
[  206.101347][T10378] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1871: corrupted inode contents
[  206.116216][T10378] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1871: mark_inode_dirty error
[  206.150526][T10378] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1871: Failed to acquire dquot type 0
[  206.184560][T10378] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1871: corrupted inode contents
[  206.208271][T10382] loop4: detected capacity change from 0 to 512
[  206.221476][T10378] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1871: mark_inode_dirty error
[  206.222400][T10382] EXT4-fs: Ignoring removed nobh option
[  206.246910][T10378] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1871: corrupted inode contents
[  206.262876][T10378] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1871: mark_inode_dirty error
[  206.294342][T10384] loop0: detected capacity change from 0 to 512
[  206.294655][T10378] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1871: corrupted inode contents
[  206.316452][T10384] EXT4-fs: Ignoring removed nobh option
[  206.318122][T10382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1872: corrupted inode contents
[  206.334982][T10378] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  206.336344][T10378] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1871: corrupted inode contents
[  206.358719][T10378] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1871: mark_inode_dirty error
[  206.360052][T10382] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1872: mark_inode_dirty error
[  206.371534][T10378] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  206.394384][T10382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1872: corrupted inode contents
[  206.396860][T10384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1873: corrupted inode contents
[  206.409102][T10382] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1872: mark_inode_dirty error
[  206.424140][T10378] EXT4-fs (loop3): 1 truncate cleaned up
[  206.435594][T10384] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1873: mark_inode_dirty error
[  206.443961][T10378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.449403][T10382] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1872: Failed to acquire dquot type 0
[  206.467029][T10384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1873: corrupted inode contents
[  206.479123][T10378] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.499158][T10384] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1873: mark_inode_dirty error
[  206.513058][T10382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1872: corrupted inode contents
[  206.515223][T10384] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1873: Failed to acquire dquot type 0
[  206.538855][T10382] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1872: mark_inode_dirty error
[  206.551984][T10382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1872: corrupted inode contents
[  206.565462][T10382] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1872: mark_inode_dirty error
[  206.570202][T10378] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.589547][T10382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1872: corrupted inode contents
[  206.589757][T10384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1873: corrupted inode contents
[  206.590699][T10384] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1873: mark_inode_dirty error
[  206.604756][T10382] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  206.616895][T10384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1873: corrupted inode contents
[  206.627890][   T36] tipc: Node number set to 2886997031
[  206.656103][T10384] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1873: mark_inode_dirty error
[  206.673497][T10382] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1872: corrupted inode contents
[  206.675196][T10384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1873: corrupted inode contents
[  206.706331][T10382] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1872: mark_inode_dirty error
[  206.709403][T10384] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  206.728429][T10384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1873: corrupted inode contents
[  206.742147][T10384] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1873: mark_inode_dirty error
[  206.756672][T10382] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  206.766385][T10384] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  206.775127][T10382] EXT4-fs (loop4): 1 truncate cleaned up
[  206.787310][T10384] EXT4-fs (loop0): 1 truncate cleaned up
[  206.791924][T10382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.807482][T10382] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.820904][T10384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.837058][T10384] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.839955][T10382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.908186][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.952739][T10401] loop4: detected capacity change from 0 to 512
[  206.959744][T10401] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  206.973425][T10401] EXT4-fs (loop4): 1 truncate cleaned up
[  206.979499][T10401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.024151][T10405] loop0: detected capacity change from 0 to 8192
[  207.072624][T10408] loop0: detected capacity change from 0 to 128
[  207.081967][T10408] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  207.094457][T10408] ext4 filesystem being mounted at /365/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  207.214399][T10412] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  207.297617][T10412] tipc: Started in network mode
[  207.302534][T10412] tipc: Node identity ac141427, cluster identity 4711
[  207.325221][T10412] tipc: Enabled bearer <udp:syz0>, priority 10
[  207.494855][T10420] loop1: detected capacity change from 0 to 128
[  207.559408][T10423] loop3: detected capacity change from 0 to 1024
[  207.586654][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1884'.
[  207.601205][T10423] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.708859][T10423] lo speed is unknown, defaulting to 1000
[  207.745156][T10429] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 3)
[  207.772825][T10429] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  207.785195][T10429] EXT4-fs (loop3): This should not happen!! Data will be lost
[  207.785195][T10429] 
[  207.815579][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.834246][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.853433][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.868824][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.885580][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.900119][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.928427][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.944349][T10423] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.958756][T10422] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1885: lblock 3 mapped to illegal pblock 3 (length 1)
[  208.028751][T10434] loop4: detected capacity change from 0 to 512
[  208.036402][T10434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  208.051084][T10434] EXT4-fs (loop4): 1 truncate cleaned up
[  208.085093][T10432] loop1: detected capacity change from 0 to 512
[  208.113852][T10432] EXT4-fs: Ignoring removed nobh option
[  208.136956][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1887'.
[  208.146548][T10434] random: crng reseeded on system resumption
[  208.187935][T10441] loop4: detected capacity change from 0 to 512
[  208.197358][T10441] EXT4-fs: Ignoring removed orlov option
[  208.204244][T10441] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  208.216892][T10432] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1886: corrupted inode contents
[  208.230986][T10441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  208.239170][T10441] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1888: corrupted in-inode xattr: e_value size too large
[  208.253581][T10432] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1886: mark_inode_dirty error
[  208.253595][T10441] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1888: couldn't read orphan inode 15 (err -117)
[  208.277628][   T36] tipc: Node number set to 2886997031
[  208.301977][T10432] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1886: corrupted inode contents
[  208.322457][T10432] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1886: mark_inode_dirty error
[  208.390411][T10432] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1886: Failed to acquire dquot type 0
[  208.422267][T10449] loop0: detected capacity change from 0 to 8192
[  208.435495][T10432] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1886: corrupted inode contents
[  208.472312][T10432] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1886: mark_inode_dirty error
[  208.484680][ T8872] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  208.496999][ T8872] EXT4-fs (loop3): This should not happen!! Data will be lost
[  208.496999][ T8872] 
[  208.537917][T10432] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1886: corrupted inode contents
[  208.554791][T10456] support for cryptoloop has been removed.  Use dm-crypt instead.
[  208.589644][T10457] syzkaller0: entered promiscuous mode
[  208.595281][T10457] syzkaller0: entered allmulticast mode
[  208.614089][T10432] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1886: mark_inode_dirty error
[  208.629072][T10432] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1886: corrupted inode contents
[  208.650343][T10432] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  208.668691][T10432] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1886: corrupted inode contents
[  208.689426][T10432] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1886: mark_inode_dirty error
[  208.713272][T10432] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  208.736896][T10460] loop3: detected capacity change from 0 to 764
[  208.762353][T10432] EXT4-fs (loop1): 1 truncate cleaned up
[  208.772538][T10462] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1895'.
[  208.791313][T10462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10462 comm=syz.5.1895
[  208.838211][T10468] loop0: detected capacity change from 0 to 512
[  208.845105][T10432] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.858882][T10468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  208.879251][T10466] loop5: detected capacity change from 0 to 8192
[  208.888425][T10468] EXT4-fs (loop0): 1 truncate cleaned up
[  208.911186][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1898'.
[  208.920584][T10468] random: crng reseeded on system resumption
[  208.930203][T10466]  loop5: p2
[  208.933505][T10466] loop5: p2 start 150994947 is beyond EOD, truncated
[  209.109878][T10483] loop4: detected capacity change from 0 to 8192
[  209.162300][   T29] kauditd_printk_skb: 752 callbacks suppressed
[  209.162318][   T29] audit: type=1326 audit(1757100625.023:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e74cebe9 code=0x7ffc0000
[  209.167540][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1908'.
[  209.168906][   T29] audit: type=1326 audit(1757100625.033:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20e74cd84a code=0x7ffc0000
[  209.227830][   T29] audit: type=1326 audit(1757100625.096:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f20e75014a5 code=0x7ffc0000
[  209.252582][T10496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10496 comm=syz.1.1908
[  209.288443][T10481] lo speed is unknown, defaulting to 1000
[  209.399749][T10508] FAULT_INJECTION: forcing a failure.
[  209.399749][T10508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.413042][T10508] CPU: 0 UID: 0 PID: 10508 Comm: syz.1.1910 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  209.413073][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  209.413112][T10508] Call Trace:
[  209.413119][T10508]  <TASK>
[  209.413127][T10508]  __dump_stack+0x1d/0x30
[  209.413152][T10508]  dump_stack_lvl+0xe8/0x140
[  209.413174][T10508]  dump_stack+0x15/0x1b
[  209.413215][T10508]  should_fail_ex+0x265/0x280
[  209.413239][T10508]  should_fail+0xb/0x20
[  209.413259][T10508]  should_fail_usercopy+0x1a/0x20
[  209.413285][T10508]  _copy_from_user+0x1c/0xb0
[  209.413321][T10508]  get_timespec64+0x4c/0x100
[  209.413344][T10508]  __se_sys_clock_nanosleep+0x10b/0x250
[  209.413384][T10508]  __x64_sys_clock_nanosleep+0x55/0x70
[  209.413457][T10508]  x64_sys_call+0x272d/0x2ff0
[  209.413481][T10508]  do_syscall_64+0xd2/0x200
[  209.413509][T10508]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  209.413529][T10508]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  209.413609][T10508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.413697][T10508] RIP: 0033:0x7fe398c314a5
[  209.413712][T10508] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  209.413742][T10508] RSP: 002b:00007fe39765efa0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  209.413775][T10508] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe398c314a5
[  209.413788][T10508] RDX: 00007fe39765efe0 RSI: 0000000000000000 RDI: 0000000000000000
[  209.413800][T10508] RBP: 00007fe39765f090 R08: 0000000000000000 R09: 0000000000000000
[  209.413813][T10508] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  209.413825][T10508] R13: 00007fe398e36038 R14: 00007fe398e35fa0 R15: 00007ffdc1938898
[  209.413845][T10508]  </TASK>
[  209.418547][   T29] audit: type=1326 audit(1757100625.296:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e74cebe9 code=0x7ffc0000
[  209.442524][   T29] audit: type=1326 audit(1757100625.327:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e74cebe9 code=0x7ffc0000
[  209.660258][T10513] loop0: detected capacity change from 0 to 512
[  209.666834][T10513] EXT4-fs: Ignoring removed orlov option
[  209.673114][T10513] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  209.682975][T10513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  209.691695][T10513] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1913: corrupted in-inode xattr: e_value size too large
[  209.706769][T10513] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1913: couldn't read orphan inode 15 (err -117)
[  209.846432][   T29] audit: type=1326 audit(1757100625.737:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a415ebe9 code=0x7ffc0000
[  209.870128][   T29] audit: type=1326 audit(1757100625.737:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a415ebe9 code=0x7ffc0000
[  209.911290][   T29] audit: type=1326 audit(1757100625.800:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83a415ebe9 code=0x7ffc0000
[  209.934950][   T29] audit: type=1326 audit(1757100625.800:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a415ebe9 code=0x7ffc0000
[  209.958535][   T29] audit: type=1326 audit(1757100625.800:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a415ebe9 code=0x7ffc0000
[  210.125531][T10522] loop3: detected capacity change from 0 to 512
[  210.136434][T10522] EXT4-fs: Ignoring removed nobh option
[  210.147626][T10524] loop4: detected capacity change from 0 to 8192
[  210.205134][T10522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1916: corrupted inode contents
[  210.220492][T10522] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1916: mark_inode_dirty error
[  210.251819][T10522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1916: corrupted inode contents
[  210.278165][T10522] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1916: mark_inode_dirty error
[  210.322417][T10522] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1916: Failed to acquire dquot type 0
[  210.356842][T10522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1916: corrupted inode contents
[  210.373371][T10522] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1916: mark_inode_dirty error
[  210.392942][T10522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1916: corrupted inode contents
[  210.408136][T10522] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1916: mark_inode_dirty error
[  210.433455][T10522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1916: corrupted inode contents
[  210.494233][T10522] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  210.515254][T10544] loop0: detected capacity change from 0 to 1024
[  210.523505][T10522] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1916: corrupted inode contents
[  210.554477][T10522] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1916: mark_inode_dirty error
[  210.578974][T10544] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.600735][T10522] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  210.664213][T10544] lo speed is unknown, defaulting to 1000
[  210.680709][T10522] EXT4-fs (loop3): 1 truncate cleaned up
[  210.691715][T10550] loop1: detected capacity change from 0 to 8192
[  210.713449][T10522] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.722836][T10544] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 3)
[  210.750527][T10544] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  210.762921][T10544] EXT4-fs (loop0): This should not happen!! Data will be lost
[  210.762921][T10544] 
[  210.773103][T10550]  loop1: p2
[  210.776469][T10550] loop1: p2 start 150994947 is beyond EOD, truncated
[  210.803769][T10565] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  210.844936][T10565] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  210.862771][T10568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1932'.
[  210.882031][T10543] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  210.884752][T10568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10568 comm=syz.1.1932
[  210.909357][T10565] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  210.936379][T10565] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  210.966519][T10565] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  210.981652][T10577] loop3: detected capacity change from 0 to 512
[  210.990415][T10565] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  211.004858][T10581] FAULT_INJECTION: forcing a failure.
[  211.004858][T10581] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  211.018043][T10581] CPU: 1 UID: 0 PID: 10581 Comm: syz.1.1938 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  211.018140][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  211.018155][T10581] Call Trace:
[  211.018162][T10581]  <TASK>
[  211.018170][T10581]  __dump_stack+0x1d/0x30
[  211.018195][T10581]  dump_stack_lvl+0xe8/0x140
[  211.018236][T10581]  dump_stack+0x15/0x1b
[  211.018251][T10581]  should_fail_ex+0x265/0x280
[  211.018271][T10581]  should_fail+0xb/0x20
[  211.018292][T10581]  should_fail_usercopy+0x1a/0x20
[  211.018319][T10581]  _copy_from_user+0x1c/0xb0
[  211.018387][T10581]  snd_seq_ioctl+0x127/0x2e0
[  211.018428][T10581]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  211.018454][T10581]  __se_sys_ioctl+0xcb/0x140
[  211.018471][T10581]  __x64_sys_ioctl+0x43/0x50
[  211.018550][T10581]  x64_sys_call+0x1816/0x2ff0
[  211.018648][T10581]  do_syscall_64+0xd2/0x200
[  211.018709][T10581]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  211.018732][T10581]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  211.018757][T10581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.018827][T10581] RIP: 0033:0x7fe398bfebe9
[  211.018850][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.018897][T10577] loop3: detected capacity change from 0 to 2048
[  211.018906][T10581] RSP: 002b:00007fe39765f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  211.018926][T10581] RAX: ffffffffffffffda RBX: 00007fe398e35fa0 RCX: 00007fe398bfebe9
[  211.018937][T10581] RDX: 0000200000000580 RSI: 00000000408c5333 RDI: 0000000000000006
[  211.019000][T10581] RBP: 00007fe39765f090 R08: 0000000000000000 R09: 0000000000000000
[  211.019017][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.019035][T10581] R13: 00007fe398e36038 R14: 00007fe398e35fa0 R15: 00007ffdc1938898
[  211.019069][T10581]  </TASK>
[  211.069745][T10565] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  211.220882][T10543] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.1924: lblock 3 mapped to illegal pblock 3 (length 1)
[  211.260486][T10589] netlink: 'syz.1.1941': attribute type 1 has an invalid length.
[  211.270047][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'.
[  211.282008][T10589] ip6gre1: entered allmulticast mode
[  211.381734][T10593] loop4: detected capacity change from 0 to 8192
[  211.449341][T10593]  loop4: p2
[  211.452686][T10593] loop4: p2 start 150994947 is beyond EOD, truncated
[  211.523909][T10601] loop1: detected capacity change from 0 to 512
[  211.535100][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1946'.
[  211.544866][ T8900] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  211.550438][T10601] EXT4-fs: Ignoring removed nobh option
[  211.557201][ T8900] EXT4-fs (loop0): This should not happen!! Data will be lost
[  211.557201][ T8900] 
[  211.559747][T10605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10605 comm=syz.4.1946
[  211.633426][T10607] loop5: detected capacity change from 0 to 8192
[  211.659509][T10601] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1945: corrupted inode contents
[  211.683664][T10601] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1945: mark_inode_dirty error
[  211.687350][T10607]  loop5: p2
[  211.707272][T10607] loop5: p2 start 150994947 is beyond EOD, truncated
[  211.716865][T10601] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1945: corrupted inode contents
[  211.745988][T10601] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1945: mark_inode_dirty error
[  211.783435][T10601] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1945: Failed to acquire dquot type 0
[  211.804350][T10629] netlink: 'syz.3.1957': attribute type 1 has an invalid length.
[  211.813106][T10601] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1945: corrupted inode contents
[  211.821780][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'.
[  211.836357][T10601] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1945: mark_inode_dirty error
[  211.837047][T10629] ip6gre2: entered allmulticast mode
[  211.853974][T10601] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1945: corrupted inode contents
[  211.891120][T10601] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1945: mark_inode_dirty error
[  211.919584][T10601] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1945: corrupted inode contents
[  211.920218][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1960'.
[  211.933600][T10633] loop0: detected capacity change from 0 to 8192
[  211.943303][T10637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10637 comm=syz.3.1960
[  211.961124][T10601] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  211.977729][T10635] loop4: detected capacity change from 0 to 8192
[  211.984604][T10633]  loop0: p2
[  211.988021][T10633] loop0: p2 start 150994947 is beyond EOD, truncated
[  211.998390][T10601] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1945: corrupted inode contents
[  212.020749][T10601] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1945: mark_inode_dirty error
[  212.049775][T10601] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  212.064965][T10601] EXT4-fs (loop1): 1 truncate cleaned up
[  212.081767][T10601] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.098991][T10642] syzkaller0: entered promiscuous mode
[  212.104513][T10642] syzkaller0: entered allmulticast mode
[  212.109002][T10648] loop3: detected capacity change from 0 to 1024
[  212.140982][T10648] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.205855][T10657] support for cryptoloop has been removed.  Use dm-crypt instead.
[  212.228605][T10648] lo speed is unknown, defaulting to 1000
[  212.275341][T10663] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 3)
[  212.289926][T10663] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  212.302290][T10663] EXT4-fs (loop3): This should not happen!! Data will be lost
[  212.302290][T10663] 
[  212.311013][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1971'.
[  212.338010][T10670] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.357329][T10671] loop1: detected capacity change from 0 to 764
[  212.370774][T10670] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.395063][T10669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10669 comm=syz.0.1971
[  212.408028][T10647] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.522298][T10647] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.536753][T10674] loop0: detected capacity change from 0 to 8192
[  212.537034][T10403] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  212.593950][T10647] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.631963][T10670] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.663138][T10648] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.689038][T10665] lo speed is unknown, defaulting to 1000
[  212.692154][T10678] loop5: detected capacity change from 0 to 8192
[  212.701670][T10670] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.1964: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.744297][T10678]  loop5: p2
[  212.747627][T10678] loop5: p2 start 150994947 is beyond EOD, truncated
[  212.835609][T10695] loop1: detected capacity change from 0 to 128
[  212.923836][ T8872] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  212.936206][ T8872] EXT4-fs (loop3): This should not happen!! Data will be lost
[  212.936206][ T8872] 
[  213.046703][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'.
[  213.150926][T10701] loop5: detected capacity change from 0 to 8192
[  213.213356][T10705] support for cryptoloop has been removed.  Use dm-crypt instead.
[  213.319818][T10712] syzkaller0: entered promiscuous mode
[  213.325522][T10712] syzkaller0: entered allmulticast mode
[  213.344632][T10717] loop4: detected capacity change from 0 to 764
[  213.572392][T10732] lo speed is unknown, defaulting to 1000
[  213.584284][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2001'.
[  213.605244][T10744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10744 comm=syz.1.2001
[  213.703152][T10750] loop0: detected capacity change from 0 to 8192
[  213.754166][T10750]  loop0: p2
[  213.757485][T10750] loop0: p2 start 150994947 is beyond EOD, truncated
[  213.794136][T10756] support for cryptoloop has been removed.  Use dm-crypt instead.
[  213.867549][T10766] loop3: detected capacity change from 0 to 128
[  213.876201][T10766] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.906471][T10769] loop0: detected capacity change from 0 to 764
[  213.979598][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2012'.
[  213.992455][T10774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10774 comm=syz.5.2012
[  214.008185][T10775] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  214.103599][   T29] kauditd_printk_skb: 526 callbacks suppressed
[  214.103618][   T29] audit: type=1326 audit(1757100630.209:15643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.146976][   T29] audit: type=1326 audit(1757100630.209:15644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.170610][   T29] audit: type=1326 audit(1757100630.209:15645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.194279][   T29] audit: type=1326 audit(1757100630.220:15646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.217857][   T29] audit: type=1326 audit(1757100630.220:15647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.241513][   T29] audit: type=1326 audit(1757100630.220:15648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.265131][   T29] audit: type=1326 audit(1757100630.220:15649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.289281][   T29] audit: type=1326 audit(1757100630.220:15650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.312880][   T29] audit: type=1326 audit(1757100630.220:15651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.336536][   T29] audit: type=1326 audit(1757100630.220:15652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10776 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  214.392245][T10777] loop5: detected capacity change from 0 to 512
[  214.423353][T10777] EXT4-fs: Ignoring removed nobh option
[  214.425486][T10779] loop0: detected capacity change from 0 to 512
[  214.446403][T10779] EXT4-fs: Ignoring removed nobh option
[  214.503712][T10779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2013: corrupted inode contents
[  214.518961][T10777] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2014: corrupted inode contents
[  214.532047][T10783] loop4: detected capacity change from 0 to 8192
[  214.550963][T10791] loop1: detected capacity change from 0 to 128
[  214.557753][T10779] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.2013: mark_inode_dirty error
[  214.572309][T10779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2013: corrupted inode contents
[  214.590125][T10783]  loop4: p2
[  214.590681][T10777] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.2014: mark_inode_dirty error
[  214.595616][T10783] loop4: p2 start 150994947 is beyond EOD, truncated
[  214.613588][T10779] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2013: mark_inode_dirty error
[  214.652062][T10779] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2013: Failed to acquire dquot type 0
[  214.676944][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'.
[  214.738393][T10777] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2014: corrupted inode contents
[  214.757907][T10779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2013: corrupted inode contents
[  214.771763][T10777] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2014: mark_inode_dirty error
[  214.784697][T10779] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2013: mark_inode_dirty error
[  214.789189][T10777] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2014: Failed to acquire dquot type 0
[  214.799568][T10779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2013: corrupted inode contents
[  214.888005][T10801] lo speed is unknown, defaulting to 1000
[  215.022445][T10801] loop3: detected capacity change from 0 to 164
[  215.033088][T10777] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2014: corrupted inode contents
[  215.052300][T10801] syz.3.2019: attempt to access beyond end of device
[  215.052300][T10801] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  215.066292][T10801] syz.3.2019: attempt to access beyond end of device
[  215.066292][T10801] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  215.107128][T10779] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2013: mark_inode_dirty error
[  215.196420][T10777] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2014: mark_inode_dirty error
[  215.240794][T10779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2013: corrupted inode contents
[  215.257875][T10777] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2014: corrupted inode contents
[  215.280291][T10779] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  215.290815][T10779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2013: corrupted inode contents
[  215.310033][T10777] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2014: mark_inode_dirty error
[  215.327206][T10779] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2013: mark_inode_dirty error
[  215.344411][T10779] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  215.355927][T10777] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2014: corrupted inode contents
[  215.358819][T10779] EXT4-fs (loop0): 1 truncate cleaned up
[  215.379990][T10777] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  215.388804][T10779] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.449341][T10804] lo speed is unknown, defaulting to 1000
[  215.487348][T10777] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2014: corrupted inode contents
[  215.500862][T10777] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2014: mark_inode_dirty error
[  215.513810][T10777] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  215.528297][T10777] EXT4-fs (loop5): 1 truncate cleaned up
[  215.564841][T10777] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.601544][T10811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10811 comm=syz.3.2024
[  215.615356][T10777] EXT4-fs unmount: 29 callbacks suppressed
[  215.615408][T10777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.650155][T10816] loop3: detected capacity change from 0 to 512
[  215.656741][T10816] EXT4-fs: Ignoring removed orlov option
[  215.662916][T10816] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  215.672431][T10816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  215.680821][T10816] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2026: corrupted in-inode xattr: e_value size too large
[  215.695384][T10816] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2026: couldn't read orphan inode 15 (err -117)
[  215.717632][T10816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.032476][T10829] lo speed is unknown, defaulting to 1000
[  216.099073][T10829] loop0: detected capacity change from 0 to 164
[  216.110742][T10829] syz.0.2028: attempt to access beyond end of device
[  216.110742][T10829] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  216.124732][T10829] syz.0.2028: attempt to access beyond end of device
[  216.124732][T10829] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  216.174953][T10834] loop1: detected capacity change from 0 to 128
[  216.189092][T10832] loop5: detected capacity change from 0 to 512
[  216.216180][T10832] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  216.324577][T10832] EXT4-fs (loop5): 1 truncate cleaned up
[  216.358760][T10832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.446278][T10834] __nla_validate_parse: 1 callbacks suppressed
[  216.446312][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'.
[  216.473804][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.521094][T10846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2036'.
[  216.531050][T10846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10846 comm=syz.4.2036
[  216.669639][T10856] loop0: detected capacity change from 0 to 128
[  216.694989][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.707518][T10856] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.726684][T10858] loop5: detected capacity change from 0 to 512
[  216.733521][T10858] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  216.733538][T10856] ext4 filesystem being mounted at /398/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.759900][T10865] loop4: detected capacity change from 0 to 1024
[  216.787296][T10865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  216.793234][T10858] EXT4-fs (loop5): 1 truncate cleaned up
[  216.801777][T10865] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.833278][T10858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.871006][T10873] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  216.885534][T10865] lo speed is unknown, defaulting to 1000
[  216.901028][T10873] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  217.000683][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2049'.
[  217.013515][T10881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10881 comm=syz.3.2049
[  217.045376][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.060039][T10884] netlink: 440 bytes leftover after parsing attributes in process `syz.3.2051'.
[  217.098817][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.112707][ T1699] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1)
[  217.116823][T10888] loop3: detected capacity change from 0 to 128
[  217.127188][ T1699] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  217.144827][ T1699] EXT4-fs (loop4): This should not happen!! Data will be lost
[  217.144827][ T1699] 
[  217.167698][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  217.189347][T10894] netlink: 'syz.4.2053': attribute type 1 has an invalid length.
[  217.205817][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'.
[  217.214908][T10896] FAULT_INJECTION: forcing a failure.
[  217.214908][T10896] name failslab, interval 1, probability 0, space 0, times 0
[  217.227576][T10896] CPU: 1 UID: 0 PID: 10896 Comm: syz.0.2055 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  217.227670][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  217.227681][T10896] Call Trace:
[  217.227687][T10896]  <TASK>
[  217.227725][T10896]  __dump_stack+0x1d/0x30
[  217.227794][T10896]  dump_stack_lvl+0xe8/0x140
[  217.227860][T10896]  dump_stack+0x15/0x1b
[  217.227881][T10896]  should_fail_ex+0x265/0x280
[  217.227908][T10896]  should_failslab+0x8c/0xb0
[  217.227932][T10896]  __kmalloc_noprof+0xa5/0x3e0
[  217.228034][T10896]  ? unregister_netdevice_many_notify+0x4c9/0x15d0
[  217.228067][T10896]  ? unlist_netdevice+0x2cc/0x320
[  217.228103][T10896]  unregister_netdevice_many_notify+0x4c9/0x15d0
[  217.228208][T10896]  ? __rcu_read_unlock+0x4f/0x70
[  217.228236][T10896]  unregister_netdevice_queue+0x1f5/0x220
[  217.228321][T10896]  unregister_netdev+0xb3/0xe0
[  217.228353][T10896]  slip_close+0xe4/0x100
[  217.228382][T10896]  ? __pfx_slip_close+0x10/0x10
[  217.228412][T10896]  tty_ldisc_close+0x71/0xa0
[  217.228468][T10896]  tty_set_ldisc+0x1b9/0x380
[  217.228554][T10896]  tiocsetd+0x51/0x60
[  217.228604][T10896]  tty_ioctl+0xa7f/0xb80
[  217.228704][T10896]  ? __pfx_tty_ioctl+0x10/0x10
[  217.228733][T10896]  __se_sys_ioctl+0xcb/0x140
[  217.228780][T10896]  __x64_sys_ioctl+0x43/0x50
[  217.228802][T10896]  x64_sys_call+0x1816/0x2ff0
[  217.228828][T10896]  do_syscall_64+0xd2/0x200
[  217.228936][T10896]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  217.228965][T10896]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  217.228998][T10896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.229069][T10896] RIP: 0033:0x7f2a7065ebe9
[  217.229087][T10896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.229109][T10896] RSP: 002b:00007f2a6f0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  217.229127][T10896] RAX: ffffffffffffffda RBX: 00007f2a70895fa0 RCX: 00007f2a7065ebe9
[  217.229143][T10896] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003
[  217.229158][T10896] RBP: 00007f2a6f0bf090 R08: 0000000000000000 R09: 0000000000000000
[  217.229173][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.229184][T10896] R13: 00007f2a70896038 R14: 00007f2a70895fa0 R15: 00007ffe01cb72e8
[  217.229202][T10896]  </TASK>
[  217.230799][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2052'.
[  217.257785][T10898] loop5: detected capacity change from 0 to 1024
[  217.478898][T10894] ip6gre1: entered allmulticast mode
[  217.496029][T10898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  217.508155][T10898] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.521320][T10908] loop4: detected capacity change from 0 to 128
[  217.531602][T10908] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.553839][T10908] ext4 filesystem being mounted at /376/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  217.683904][T10920] netlink: 440 bytes leftover after parsing attributes in process `syz.0.2063'.
[  217.694321][T10922] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  217.708768][T10922] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  217.725919][T10898] lo speed is unknown, defaulting to 1000
[  217.738663][T10921] loop1: detected capacity change from 0 to 8192
[  217.756883][T10923] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 3)
[  217.794629][T10923] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  217.807015][T10923] EXT4-fs (loop5): This should not happen!! Data will be lost
[  217.807015][T10923] 
[  217.817214][T10921]  loop1: p2
[  217.820708][T10921] loop1: p2 start 150994947 is beyond EOD, truncated
[  217.871417][T10898] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  217.894867][T10898] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  217.909571][T10898] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  217.924383][T10897] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  217.962619][T10927] loop0: detected capacity change from 0 to 512
[  217.975583][T10932] loop3: detected capacity change from 0 to 512
[  217.993103][T10932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  218.010698][T10898] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  218.025182][T10927] EXT4-fs: Ignoring removed nobh option
[  218.037251][T10897] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  218.060106][T10932] EXT4-fs (loop3): 1 truncate cleaned up
[  218.066222][T10932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.082327][T10930] loop1: detected capacity change from 0 to 512
[  218.089468][T10898] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  218.107537][T10930] EXT4-fs: Ignoring removed nobh option
[  218.113525][T10897] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  218.131412][T10898] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2056: lblock 3 mapped to illegal pblock 3 (length 1)
[  218.146729][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.150133][T10927] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2066: corrupted inode contents
[  218.179510][T10927] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.2066: mark_inode_dirty error
[  218.238916][T10927] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2066: corrupted inode contents
[  218.261601][T10927] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2066: mark_inode_dirty error
[  218.276044][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2067: corrupted inode contents
[  218.292031][T10927] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2066: Failed to acquire dquot type 0
[  218.306850][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2068'.
[  218.311412][T10927] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2066: corrupted inode contents
[  218.345008][T10930] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2067: mark_inode_dirty error
[  218.355639][T10927] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2066: mark_inode_dirty error
[  218.370436][ T8869] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  218.382863][ T8869] EXT4-fs (loop5): This should not happen!! Data will be lost
[  218.382863][ T8869] 
[  218.394175][T10927] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2066: corrupted inode contents
[  218.415658][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2067: corrupted inode contents
[  218.438546][T10927] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2066: mark_inode_dirty error
[  218.450963][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  218.468510][T10930] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2067: mark_inode_dirty error
[  218.483148][T10927] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2066: corrupted inode contents
[  218.498739][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.500947][T10930] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2067: Failed to acquire dquot type 0
[  218.523467][T10927] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  218.534296][T10927] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2066: corrupted inode contents
[  218.550654][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2067: corrupted inode contents
[  218.565312][T10930] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2067: mark_inode_dirty error
[  218.573289][T10927] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2066: mark_inode_dirty error
[  218.578789][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2067: corrupted inode contents
[  218.631662][T10927] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  218.642370][T10930] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2067: mark_inode_dirty error
[  218.664275][T10957] FAULT_INJECTION: forcing a failure.
[  218.664275][T10957] name failslab, interval 1, probability 0, space 0, times 0
[  218.677007][T10957] CPU: 0 UID: 0 PID: 10957 Comm: syz.3.2077 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  218.677039][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.677052][T10957] Call Trace:
[  218.677058][T10957]  <TASK>
[  218.677064][T10957]  __dump_stack+0x1d/0x30
[  218.677084][T10957]  dump_stack_lvl+0xe8/0x140
[  218.677163][T10957]  dump_stack+0x15/0x1b
[  218.677185][T10957]  should_fail_ex+0x265/0x280
[  218.677240][T10957]  should_failslab+0x8c/0xb0
[  218.677272][T10957]  kmem_cache_alloc_node_noprof+0x57/0x320
[  218.677353][T10957]  ? __alloc_skb+0x101/0x320
[  218.677375][T10957]  __alloc_skb+0x101/0x320
[  218.677400][T10957]  netlink_alloc_large_skb+0xba/0xf0
[  218.677451][T10957]  netlink_sendmsg+0x3cf/0x6b0
[  218.677483][T10957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.677542][T10957]  __sock_sendmsg+0x145/0x180
[  218.677572][T10957]  ____sys_sendmsg+0x31e/0x4e0
[  218.677597][T10957]  ___sys_sendmsg+0x17b/0x1d0
[  218.677639][T10957]  __x64_sys_sendmsg+0xd4/0x160
[  218.677736][T10957]  x64_sys_call+0x191e/0x2ff0
[  218.677833][T10957]  do_syscall_64+0xd2/0x200
[  218.677872][T10957]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  218.677901][T10957]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  218.677927][T10957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.677974][T10957] RIP: 0033:0x7f83a415ebe9
[  218.677993][T10957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.678016][T10957] RSP: 002b:00007f83a2bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.678039][T10957] RAX: ffffffffffffffda RBX: 00007f83a4395fa0 RCX: 00007f83a415ebe9
[  218.678081][T10957] RDX: 0000000024008004 RSI: 0000200000000900 RDI: 0000000000000003
[  218.678094][T10957] RBP: 00007f83a2bc7090 R08: 0000000000000000 R09: 0000000000000000
[  218.678106][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.678172][T10957] R13: 00007f83a4396038 R14: 00007f83a4395fa0 R15: 00007ffc7eef8c48
[  218.678196][T10957]  </TASK>
[  218.882755][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2067: corrupted inode contents
[  218.885801][   T29] kauditd_printk_skb: 495 callbacks suppressed
[  218.885822][   T29] audit: type=1326 audit(1757100634.997:16140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  218.898441][T10927] EXT4-fs (loop0): 1 truncate cleaned up
[  218.901047][   T29] audit: type=1326 audit(1757100634.997:16141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  218.901082][   T29] audit: type=1326 audit(1757100634.997:16142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  218.901224][   T29] audit: type=1326 audit(1757100634.997:16143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  218.901255][   T29] audit: type=1326 audit(1757100635.018:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  218.925611][T10930] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  218.930592][   T29] audit: type=1326 audit(1757100635.018:16145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  218.988658][T10927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.043240][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2067: corrupted inode contents
[  219.045218][T10930] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2067: mark_inode_dirty error
[  219.071873][T10927] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.088216][T10962] loop5: detected capacity change from 0 to 128
[  219.090231][T10930] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  219.179458][T10962] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  219.180909][T10927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.215611][T10930] EXT4-fs (loop1): 1 truncate cleaned up
[  219.227305][T10962] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.243526][   T29] audit: type=1326 audit(1757100635.585:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a7065d550 code=0x7ffc0000
[  219.267155][   T29] audit: type=1326 audit(1757100635.585:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a7065e7eb code=0x7ffc0000
[  219.267331][T10930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.290839][   T29] audit: type=1326 audit(1757100635.606:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2a7065d84a code=0x7ffc0000
[  219.356424][T10968] loop4: detected capacity change from 0 to 8192
[  219.363249][   T29] audit: type=1326 audit(1757100635.690:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10926 comm="syz.0.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  219.388441][T10930] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.412106][T10968]  loop4: p2
[  219.415361][T10968] loop4: p2 start 150994947 is beyond EOD, truncated
[  219.437504][T10965] lo speed is unknown, defaulting to 1000
[  219.464578][T10930] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.546951][T10975] loop0: detected capacity change from 0 to 512
[  219.554305][T10973] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  219.578285][T10971] loop4: detected capacity change from 0 to 1024
[  219.601894][T10975] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  219.613932][T10973] tipc: Enabled bearer <udp:syz0>, priority 10
[  219.666431][T10971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  219.692419][T10975] EXT4-fs (loop0): 1 truncate cleaned up
[  219.704591][T10975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.715661][T10971] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.804913][T10971] lo speed is unknown, defaulting to 1000
[  219.834243][T10989] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 3)
[  219.842779][T10991] support for cryptoloop has been removed.  Use dm-crypt instead.
[  219.884707][ T4902] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.902060][T10989] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  219.914548][T10989] EXT4-fs (loop4): This should not happen!! Data will be lost
[  219.914548][T10989] 
[  219.965514][T10971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.002106][T10971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.030155][T10998] loop3: detected capacity change from 0 to 764
[  220.047113][T10971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.065355][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.069192][T10971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.088929][T10971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.120972][T10971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.150358][T10970] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.173325][T11002] loop0: detected capacity change from 0 to 8192
[  220.180059][T10970] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.194674][T10971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2082: lblock 3 mapped to illegal pblock 3 (length 1)
[  220.211643][T11002]  loop0: p2
[  220.214964][T11002] loop0: p2 start 150994947 is beyond EOD, truncated
[  220.248014][T11006] loop0: detected capacity change from 0 to 128
[  220.259605][T11006] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.304158][T11006] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.376064][ T8869] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  220.388406][ T8869] EXT4-fs (loop4): This should not happen!! Data will be lost
[  220.388406][ T8869] 
[  220.400185][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  220.430464][T11019] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  220.494431][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2099'.
[  220.654961][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.694972][ T3417] tipc: Node number set to 1548756245
[  220.719412][T11026] lo speed is unknown, defaulting to 1000
[  220.756411][T11026] loop3: detected capacity change from 0 to 164
[  220.767528][T11026] syz.3.2100: attempt to access beyond end of device
[  220.767528][T11026] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  220.781575][T11026] syz.3.2100: attempt to access beyond end of device
[  220.781575][T11026] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  220.806512][T11030] loop0: detected capacity change from 0 to 512
[  220.822581][T11036] netlink: 440 bytes leftover after parsing attributes in process `syz.1.2104'.
[  220.832726][T11034] support for cryptoloop has been removed.  Use dm-crypt instead.
[  220.836551][T11030] EXT4-fs: Ignoring removed nobh option
[  220.939842][T11041] loop3: detected capacity change from 0 to 8192
[  220.973030][T11030] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2102: corrupted inode contents
[  220.991847][T11049] loop4: detected capacity change from 0 to 764
[  220.998388][T11041]  loop3: p2
[  221.007757][T11030] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.2102: mark_inode_dirty error
[  221.029194][T11041] loop3: p2 start 150994947 is beyond EOD, truncated
[  221.086620][T11051] loop1: detected capacity change from 0 to 512
[  221.097806][T11030] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2102: corrupted inode contents
[  221.101508][T11053] loop3: detected capacity change from 0 to 1024
[  221.119157][T11038] loop5: detected capacity change from 0 to 512
[  221.128670][T11051] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  221.138683][T11030] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2102: mark_inode_dirty error
[  221.153802][T11038] EXT4-fs: Ignoring removed nobh option
[  221.163237][T11051] EXT4-fs (loop1): 1 truncate cleaned up
[  221.174903][T11030] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2102: Failed to acquire dquot type 0
[  221.175438][T11053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  221.187648][T11051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.221718][T11030] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2102: corrupted inode contents
[  221.231142][T11053] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.250653][T11030] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2102: mark_inode_dirty error
[  221.264953][T11030] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2102: corrupted inode contents
[  221.278512][T11030] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2102: mark_inode_dirty error
[  221.293551][T11030] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2102: corrupted inode contents
[  221.327773][T11038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2107: corrupted inode contents
[  221.340957][T11038] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.2107: mark_inode_dirty error
[  221.362967][T11030] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  221.373314][T11053] lo speed is unknown, defaulting to 1000
[  221.402812][T11030] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2102: corrupted inode contents
[  221.416474][T11030] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2102: mark_inode_dirty error
[  221.430840][T11030] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  221.433256][T11038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2107: corrupted inode contents
[  221.458053][T11062] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 3)
[  221.472977][T11062] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  221.485298][T11062] EXT4-fs (loop3): This should not happen!! Data will be lost
[  221.485298][T11062] 
[  221.497423][T11038] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2107: mark_inode_dirty error
[  221.497856][T11030] EXT4-fs (loop0): 1 truncate cleaned up
[  221.516157][T11038] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2107: Failed to acquire dquot type 0
[  221.529516][T11065] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.549378][T11038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2107: corrupted inode contents
[  221.551620][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.565172][T11038] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2107: mark_inode_dirty error
[  221.583845][T11065] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.598562][T11038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2107: corrupted inode contents
[  221.605240][T11030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.625439][T11065] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.625532][T11038] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2107: mark_inode_dirty error
[  221.660673][T11052] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.664779][T11030] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.688258][T11052] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.703100][T11038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2107: corrupted inode contents
[  221.724000][T11065] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.741587][T11065] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.749305][T11030] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.756920][T11052] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.768405][T11038] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  221.780904][T11065] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2109: lblock 3 mapped to illegal pblock 3 (length 1)
[  221.813443][T11038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2107: corrupted inode contents
[  221.832886][T11069] veth0_virt_wifi: entered allmulticast mode
[  221.839190][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'.
[  221.856460][T11061] lo speed is unknown, defaulting to 1000
[  221.857049][T11038] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2107: mark_inode_dirty error
[  221.886848][T11038] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  221.901542][T11038] EXT4-fs (loop5): 1 truncate cleaned up
[  221.913111][T11038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.927754][T11038] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.961718][T11038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.162540][ T8872] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  222.168250][T11075] lo speed is unknown, defaulting to 1000
[  222.175169][ T8872] EXT4-fs (loop3): This should not happen!! Data will be lost
[  222.175169][ T8872] 
[  222.197670][T11077] loop0: detected capacity change from 0 to 164
[  222.210867][T11075] syz.0.2115: attempt to access beyond end of device
[  222.210867][T11075] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  222.224795][T11075] syz.0.2115: attempt to access beyond end of device
[  222.224795][T11075] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  222.233961][T11080] netlink: 440 bytes leftover after parsing attributes in process `syz.5.2117'.
[  222.270793][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  222.399659][T11089] loop0: detected capacity change from 0 to 512
[  222.407039][T11089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  222.420451][T11089] EXT4-fs (loop0): 1 truncate cleaned up
[  222.427870][T11089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.566367][T11100] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2124'.
[  222.582373][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.636073][T11104] loop5: detected capacity change from 0 to 128
[  222.655616][T11104] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  222.672093][T11102] loop0: detected capacity change from 0 to 8192
[  222.689316][T11104] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  222.722163][T11106] loop3: detected capacity change from 0 to 8192
[  222.745982][T11102]  loop0: p2
[  222.749387][T11102] loop0: p2 start 150994947 is beyond EOD, truncated
[  222.764117][T11106]  loop3: p2
[  222.768913][T11106] loop3: p2 start 150994947 is beyond EOD, truncated
[  222.839006][T11110] netlink: 440 bytes leftover after parsing attributes in process `syz.1.2130'.
[  222.862034][T11113] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  222.977897][T11117] lo speed is unknown, defaulting to 1000
[  222.983848][T11116] support for cryptoloop has been removed.  Use dm-crypt instead.
[  223.012743][T11117] loop3: detected capacity change from 0 to 164
[  223.033533][T11117] syz.3.2129: attempt to access beyond end of device
[  223.033533][T11117] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  223.047424][T11117] syz.3.2129: attempt to access beyond end of device
[  223.047424][T11117] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  223.066625][T11112] loop0: detected capacity change from 0 to 8192
[  223.130563][T11112]  loop0: p2
[  223.133917][T11112] loop0: p2 start 150994947 is beyond EOD, truncated
[  223.134748][T11120] loop1: detected capacity change from 0 to 8192
[  223.141531][ T4902] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.177420][T11125] loop4: detected capacity change from 0 to 764
[  223.266984][T11133] netlink: 'syz.1.2137': attribute type 1 has an invalid length.
[  223.315559][T11142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2140'.
[  223.345379][T11146] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2139'.
[  223.354611][T11135] loop0: detected capacity change from 0 to 8192
[  223.380918][T11149] FAULT_INJECTION: forcing a failure.
[  223.380918][T11149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.394118][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.1.2140 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  223.394148][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  223.394160][T11149] Call Trace:
[  223.394229][T11149]  <TASK>
[  223.394237][T11149]  __dump_stack+0x1d/0x30
[  223.394376][T11149]  dump_stack_lvl+0xe8/0x140
[  223.394400][T11149]  dump_stack+0x15/0x1b
[  223.394501][T11149]  should_fail_ex+0x265/0x280
[  223.394522][T11149]  should_fail+0xb/0x20
[  223.394539][T11149]  should_fail_usercopy+0x1a/0x20
[  223.394561][T11149]  _copy_from_user+0x1c/0xb0
[  223.394694][T11149]  ___sys_sendmsg+0xc1/0x1d0
[  223.394741][T11149]  __x64_sys_sendmsg+0xd4/0x160
[  223.394849][T11149]  x64_sys_call+0x191e/0x2ff0
[  223.394881][T11149]  do_syscall_64+0xd2/0x200
[  223.394915][T11149]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  223.395061][T11149]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  223.395087][T11149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.395108][T11149] RIP: 0033:0x7fe398bfebe9
[  223.395204][T11149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.395223][T11149] RSP: 002b:00007fe39760b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.395241][T11149] RAX: ffffffffffffffda RBX: 00007fe398e36090 RCX: 00007fe398bfebe9
[  223.395256][T11149] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000008
[  223.395272][T11149] RBP: 00007fe39760b090 R08: 0000000000000000 R09: 0000000000000000
[  223.395342][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.395357][T11149] R13: 00007fe398e36128 R14: 00007fe398e36090 R15: 00007ffdc1938898
[  223.395377][T11149]  </TASK>
[  223.576531][T11146] geneve2: entered promiscuous mode
[  223.581752][T11146] geneve2: entered allmulticast mode
[  223.590447][T11135]  loop0: p2
[  223.593864][T11135] loop0: p2 start 150994947 is beyond EOD, truncated
[  223.602709][ T8881] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  223.611609][ T8881] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  223.631139][ T8881] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  223.656188][ T8881] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  223.703169][   T29] kauditd_printk_skb: 401 callbacks suppressed
[  223.703186][   T29] audit: type=1401 audit(1757100640.289:16547): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  223.725992][T11157] loop1: detected capacity change from 0 to 512
[  223.742633][   T29] audit: type=1326 audit(1757100640.331:16548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.766388][   T29] audit: type=1326 audit(1757100640.331:16549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.790041][   T29] audit: type=1326 audit(1757100640.331:16550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.813683][   T29] audit: type=1326 audit(1757100640.331:16551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.837262][   T29] audit: type=1326 audit(1757100640.331:16552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.840820][T11157] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  223.861052][   T29] audit: type=1326 audit(1757100640.331:16553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.894739][   T29] audit: type=1326 audit(1757100640.331:16554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.918343][   T29] audit: type=1326 audit(1757100640.331:16555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.920459][T11157] EXT4-fs (loop1): 1 truncate cleaned up
[  223.942039][   T29] audit: type=1326 audit(1757100640.331:16556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7387ebe9 code=0x7ffc0000
[  223.948680][T11166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2148'.
[  223.984548][T11157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.021439][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.173767][T11183] support for cryptoloop has been removed.  Use dm-crypt instead.
[  224.232211][T11189] loop3: detected capacity change from 0 to 8192
[  224.245565][T11191] loop5: detected capacity change from 0 to 512
[  224.252497][T11191] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  224.278618][T11189]  loop3: p2
[  224.282331][T11189] loop3: p2 start 150994947 is beyond EOD, truncated
[  224.292820][T11193] loop4: detected capacity change from 0 to 764
[  224.379013][T11200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.387569][T11200] syzkaller0: entered promiscuous mode
[  224.393109][T11200] syzkaller0: entered allmulticast mode
[  224.406573][T11202] loop3: detected capacity change from 0 to 128
[  224.410722][T11198] tipc: Resetting bearer <eth:syzkaller0>
[  224.416692][T11202] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  224.431209][T11202] ext4 filesystem being mounted at /461/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  224.443935][T11198] tipc: Disabling bearer <eth:syzkaller0>
[  224.485378][T11205] loop4: detected capacity change from 0 to 512
[  224.492241][T11205] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  224.517234][T11205] EXT4-fs (loop4): 1 truncate cleaned up
[  224.528515][T11205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.570578][T11211] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  224.670167][T11213] loop5: detected capacity change from 0 to 8192
[  224.708239][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.768504][T11220] lo speed is unknown, defaulting to 1000
[  224.921268][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.931357][T11226] FAULT_INJECTION: forcing a failure.
[  224.931357][T11226] name failslab, interval 1, probability 0, space 0, times 0
[  224.944113][T11226] CPU: 1 UID: 0 PID: 11226 Comm: syz.0.2167 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  224.944148][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  224.944165][T11226] Call Trace:
[  224.944218][T11226]  <TASK>
[  224.944226][T11226]  __dump_stack+0x1d/0x30
[  224.944254][T11226]  dump_stack_lvl+0xe8/0x140
[  224.944280][T11226]  dump_stack+0x15/0x1b
[  224.944301][T11226]  should_fail_ex+0x265/0x280
[  224.944405][T11226]  should_failslab+0x8c/0xb0
[  224.944437][T11226]  kmem_cache_alloc_node_noprof+0x57/0x320
[  224.944475][T11226]  ? dup_task_struct+0x70/0x6a0
[  224.944567][T11226]  dup_task_struct+0x70/0x6a0
[  224.944598][T11226]  ? _parse_integer+0x27/0x40
[  224.944701][T11226]  copy_process+0x399/0x2000
[  224.944727][T11226]  ? kstrtouint+0x76/0xc0
[  224.944753][T11226]  ? kstrtouint_from_user+0x9f/0xf0
[  224.944782][T11226]  ? __rcu_read_unlock+0x4f/0x70
[  224.944814][T11226]  kernel_clone+0x16c/0x5c0
[  224.944935][T11226]  ? vfs_write+0x7e8/0x960
[  224.944967][T11226]  __x64_sys_clone+0xe6/0x120
[  224.945028][T11226]  x64_sys_call+0x119c/0x2ff0
[  224.945054][T11226]  do_syscall_64+0xd2/0x200
[  224.945163][T11226]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  224.945189][T11226]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  224.945223][T11226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.945248][T11226] RIP: 0033:0x7f2a7065ebe9
[  224.945275][T11226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.945292][T11226] RSP: 002b:00007f2a6f0befe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  224.945310][T11226] RAX: ffffffffffffffda RBX: 00007f2a70895fa0 RCX: 00007f2a7065ebe9
[  224.945366][T11226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004080b000
[  224.945405][T11226] RBP: 00007f2a6f0bf090 R08: 0000000000000000 R09: 0000000000000000
[  224.945421][T11226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  224.945436][T11226] R13: 00007f2a70896038 R14: 00007f2a70895fa0 R15: 00007ffe01cb72e8
[  224.945455][T11226]  </TASK>
[  225.154392][T11224] loop3: detected capacity change from 0 to 512
[  225.168197][T11224] EXT4-fs: Ignoring removed nobh option
[  225.224510][T11224] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2166: corrupted inode contents
[  225.257251][T11224] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.2166: mark_inode_dirty error
[  225.275235][T11245] loop1: detected capacity change from 0 to 512
[  225.283426][T11245] EXT4-fs: Ignoring removed orlov option
[  225.290792][T11224] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2166: corrupted inode contents
[  225.311630][T11245] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  225.353235][T11244] loop0: detected capacity change from 0 to 8192
[  225.366524][T11224] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2166: mark_inode_dirty error
[  225.393728][T11245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  225.424578][T11224] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2166: Failed to acquire dquot type 0
[  225.443309][T11245] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2173: corrupted in-inode xattr: e_value size too large
[  225.458049][T11245] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2173: couldn't read orphan inode 15 (err -117)
[  225.475082][T11253] netlink: 'syz.0.2177': attribute type 1 has an invalid length.
[  225.483785][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'.
[  225.493478][T11245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.518410][T11224] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2166: corrupted inode contents
[  225.542617][T11254] lo speed is unknown, defaulting to 1000
[  225.577487][T11254] loop5: detected capacity change from 0 to 164
[  225.587363][T11254] syz.5.2176: attempt to access beyond end of device
[  225.587363][T11254] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  225.601241][T11254] syz.5.2176: attempt to access beyond end of device
[  225.601241][T11254] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  225.651419][T11257] FAULT_INJECTION: forcing a failure.
[  225.651419][T11257] name failslab, interval 1, probability 0, space 0, times 0
[  225.664344][T11257] CPU: 0 UID: 0 PID: 11257 Comm: syz.0.2178 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  225.664396][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  225.664413][T11257] Call Trace:
[  225.664421][T11257]  <TASK>
[  225.664429][T11257]  __dump_stack+0x1d/0x30
[  225.664454][T11257]  dump_stack_lvl+0xe8/0x140
[  225.664479][T11257]  dump_stack+0x15/0x1b
[  225.664568][T11257]  should_fail_ex+0x265/0x280
[  225.664591][T11257]  should_failslab+0x8c/0xb0
[  225.664615][T11257]  kmem_cache_alloc_noprof+0x50/0x310
[  225.664711][T11257]  ? getname_flags+0x80/0x3b0
[  225.664739][T11257]  ? get_pid_task+0x96/0xd0
[  225.664764][T11257]  getname_flags+0x80/0x3b0
[  225.664805][T11257]  do_mq_open+0xd9/0x4f0
[  225.664830][T11257]  ? __rcu_read_unlock+0x4f/0x70
[  225.664867][T11257]  ? __fget_files+0x184/0x1c0
[  225.664902][T11257]  __x64_sys_mq_open+0xcb/0x100
[  225.664933][T11257]  x64_sys_call+0x8c6/0x2ff0
[  225.665029][T11257]  do_syscall_64+0xd2/0x200
[  225.665059][T11257]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  225.665083][T11257]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  225.665109][T11257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.665173][T11257] RIP: 0033:0x7f2a7065ebe9
[  225.665187][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.665205][T11257] RSP: 002b:00007f2a6f0bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  225.665225][T11257] RAX: ffffffffffffffda RBX: 00007f2a70895fa0 RCX: 00007f2a7065ebe9
[  225.665241][T11257] RDX: 00000000000001f0 RSI: 0000000000000040 RDI: 0000000000000000
[  225.665256][T11257] RBP: 00007f2a6f0bf090 R08: 0000000000000000 R09: 0000000000000000
[  225.665323][T11257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.665340][T11257] R13: 00007f2a70896038 R14: 00007f2a70895fa0 R15: 00007ffe01cb72e8
[  225.665364][T11257]  </TASK>
[  225.666010][T11224] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2166: mark_inode_dirty error
[  225.898878][T11224] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2166: corrupted inode contents
[  225.935250][T11224] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2166: mark_inode_dirty error
[  225.963451][T11265] lo: entered promiscuous mode
[  225.968378][T11265] lo: entered allmulticast mode
[  225.976132][T11265] tunl0: entered promiscuous mode
[  225.976215][T11264] loop0: detected capacity change from 0 to 512
[  225.981247][T11265] tunl0: entered allmulticast mode
[  225.988138][T11265] gre0: entered promiscuous mode
[  225.998132][T11265] gre0: entered allmulticast mode
[  226.006854][T11249] loop4: detected capacity change from 0 to 512
[  226.014149][T11265] gretap0: entered promiscuous mode
[  226.019429][T11265] gretap0: entered allmulticast mode
[  226.025824][T11224] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2166: corrupted inode contents
[  226.040585][T11224] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  226.041266][T11265] erspan0: entered promiscuous mode
[  226.041290][T11265] erspan0: entered allmulticast mode
[  226.042469][T11265] ip_vti0: entered promiscuous mode
[  226.054576][T11249] EXT4-fs: Ignoring removed nobh option
[  226.055253][T11265] ip_vti0: entered allmulticast mode
[  226.056691][T11265] ip6_vti0: entered promiscuous mode
[  226.062030][T11224] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2166: corrupted inode contents
[  226.066435][T11265] ip6_vti0: entered allmulticast mode
[  226.106565][T11265] sit0: entered promiscuous mode
[  226.111604][T11265] sit0: entered allmulticast mode
[  226.121914][T11265] ip6tnl0: entered promiscuous mode
[  226.127192][T11265] ip6tnl0: entered allmulticast mode
[  226.134286][T11265] ip6gre0: entered promiscuous mode
[  226.139613][T11265] ip6gre0: entered allmulticast mode
[  226.158692][T11224] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2166: mark_inode_dirty error
[  226.160144][T11265] syz_tun: entered promiscuous mode
[  226.175602][T11265] syz_tun: entered allmulticast mode
[  226.182239][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.183223][T11265] ip6gretap0: entered promiscuous mode
[  226.196858][T11265] ip6gretap0: entered allmulticast mode
[  226.203928][T11265] bridge0: entered promiscuous mode
[  226.209048][T11224] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  226.209198][T11265] bridge0: entered allmulticast mode
[  226.210288][T11265] vcan0: entered promiscuous mode
[  226.228736][T11265] vcan0: entered allmulticast mode
[  226.234665][T11265] bond0: entered promiscuous mode
[  226.239729][T11265] bond_slave_0: entered promiscuous mode
[  226.245632][T11265] bond_slave_1: entered promiscuous mode
[  226.247918][T11249] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2175: corrupted inode contents
[  226.251403][T11265] bond0: entered allmulticast mode
[  226.251420][T11265] bond_slave_0: entered allmulticast mode
[  226.251481][T11265] bond_slave_1: entered allmulticast mode
[  226.275226][T11224] EXT4-fs (loop3): 1 truncate cleaned up
[  226.283639][T11224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.286722][T11249] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.2175: mark_inode_dirty error
[  226.299525][T11265] team0: entered promiscuous mode
[  226.319310][T11249] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.2175: corrupted inode contents
[  226.321033][T11265] team_slave_0: entered promiscuous mode
[  226.321164][T11265] team_slave_1: entered promiscuous mode
[  226.321236][T11265] team0: entered allmulticast mode
[  226.321271][T11265] team_slave_0: entered allmulticast mode
[  226.321288][T11265] team_slave_1: entered allmulticast mode
[  226.340834][T11224] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.345134][T11249] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2175: mark_inode_dirty error
[  226.375286][T11265] dummy0: entered promiscuous mode
[  226.400410][T11265] dummy0: entered allmulticast mode
[  226.416367][T11249] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2175: Failed to acquire dquot type 0
[  226.423295][T11224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.443430][T11265] nlmon0: entered promiscuous mode
[  226.448647][T11265] nlmon0: entered allmulticast mode
[  226.458307][T11249] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2175: corrupted inode contents
[  226.475469][T11249] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2175: mark_inode_dirty error
[  226.488795][T11265] caif0: entered promiscuous mode
[  226.493825][T11265] caif0: entered allmulticast mode
[  226.498971][T11265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.516817][T11249] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2175: corrupted inode contents
[  226.540312][T11249] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2175: mark_inode_dirty error
[  226.558236][T11266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.575148][T11249] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2175: corrupted inode contents
[  226.596418][T11249] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  226.611193][T11249] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2175: corrupted inode contents
[  226.615427][T11284] serio: Serial port ptm0
[  226.631369][T11249] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2175: mark_inode_dirty error
[  226.648715][T11249] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  226.659169][T11249] EXT4-fs (loop4): 1 truncate cleaned up
[  226.673118][T11249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.687800][T11249] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.720224][T11249] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.773055][T11294] loop0: detected capacity change from 0 to 1024
[  226.808187][T11290] loop5: detected capacity change from 0 to 8192
[  226.834899][T11300] loop1: detected capacity change from 0 to 512
[  226.861223][T11300] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  226.892438][T11303] netlink: 'syz.5.2192': attribute type 1 has an invalid length.
[  226.902570][T11294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  226.915080][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2192'.
[  226.917213][T11300] EXT4-fs (loop1): 1 truncate cleaned up
[  226.926733][T11303] ip6gre1: entered allmulticast mode
[  226.935712][T11294] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.948377][T11300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.062022][T11316] loop5: detected capacity change from 0 to 1024
[  227.072356][T11317] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 3)
[  227.096061][T11308] lo speed is unknown, defaulting to 1000
[  227.110655][T11316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  227.119731][T11294] lo speed is unknown, defaulting to 1000
[  227.123736][T11316] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.138529][T11317] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  227.151185][T11317] EXT4-fs (loop0): This should not happen!! Data will be lost
[  227.151185][T11317] 
[  227.182801][T11320] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.202884][T11321] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 3)
[  227.213258][T11316] lo speed is unknown, defaulting to 1000
[  227.224528][T11293] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.239098][T11321] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  227.251444][T11321] EXT4-fs (loop5): This should not happen!! Data will be lost
[  227.251444][T11321] 
[  227.263626][T11320] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.280268][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.290106][T11322] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.304585][T11320] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.329237][T11322] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.329300][T11293] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.357967][T11315] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.371181][T11320] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.377997][T11315] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.401909][T11322] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.416529][T11320] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.434475][T11322] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.464061][T11320] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.478459][T11293] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2188: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.506682][T11315] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.565668][T11322] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.582427][T11322] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.2196: lblock 3 mapped to illegal pblock 3 (length 1)
[  227.745769][   T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  227.758074][   T31] EXT4-fs (loop0): This should not happen!! Data will be lost
[  227.758074][   T31] 
[  227.828205][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  227.858490][T11334] loop4: detected capacity change from 0 to 8192
[  227.900434][T11334]  loop4: p2
[  227.903718][T11334] loop4: p2 start 150994947 is beyond EOD, truncated
[  227.945503][ T8869] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  227.958042][ T8869] EXT4-fs (loop5): This should not happen!! Data will be lost
[  227.958042][ T8869] 
[  227.999885][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  228.061533][T11343] netlink: 'syz.4.2204': attribute type 1 has an invalid length.
[  228.079604][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'.
[  228.173908][T11347] support for cryptoloop has been removed.  Use dm-crypt instead.
[  228.295953][T11353] loop4: detected capacity change from 0 to 764
[  228.389038][T11349] loop5: detected capacity change from 0 to 512
[  228.405277][T11358] hub 2-0:1.0: USB hub found
[  228.410035][T11358] hub 2-0:1.0: 8 ports detected
[  228.419341][T11349] EXT4-fs: Ignoring removed nobh option
[  228.507844][T11349] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2207: corrupted inode contents
[  228.544374][T11349] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.2207: mark_inode_dirty error
[  228.557888][   T29] kauditd_printk_skb: 399 callbacks suppressed
[  228.557921][   T29] audit: type=1326 audit(1757100645.391:16952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.574562][T11349] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2207: corrupted inode contents
[  228.607358][T11349] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2207: mark_inode_dirty error
[  228.621539][   T29] audit: type=1326 audit(1757100645.391:16953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.645188][   T29] audit: type=1326 audit(1757100645.444:16954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.668861][   T29] audit: type=1326 audit(1757100645.444:16955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.692491][   T29] audit: type=1326 audit(1757100645.444:16956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.704436][T11349] Quota error (device loop5): write_blk: dquota write failed
[  228.716168][   T29] audit: type=1326 audit(1757100645.444:16957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.716204][   T29] audit: type=1326 audit(1757100645.444:16958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.716263][   T29] audit: type=1326 audit(1757100645.444:16959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.716342][   T29] audit: type=1326 audit(1757100645.444:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7065ebe9 code=0x7ffc0000
[  228.822006][T11349] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2207: Failed to acquire dquot type 0
[  228.837154][T11349] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2207: corrupted inode contents
[  228.851492][T11349] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2207: mark_inode_dirty error
[  228.886593][T11373] netlink: 'syz.0.2215': attribute type 1 has an invalid length.
[  228.889794][T11349] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2207: corrupted inode contents
[  228.908026][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'.
[  228.925994][T11349] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2207: mark_inode_dirty error
[  228.940760][T11349] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2207: corrupted inode contents
[  228.954790][T11349] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  228.966621][T11349] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2207: corrupted inode contents
[  228.980515][T11375] loop4: detected capacity change from 0 to 512
[  228.980784][T11349] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2207: mark_inode_dirty error
[  229.004624][T11349] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  229.017696][T11349] EXT4-fs (loop5): 1 truncate cleaned up
[  229.023551][T11375] EXT4-fs: Ignoring removed orlov option
[  229.032592][T11349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.045836][T11375] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  229.048008][T11349] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.082622][T11375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  229.099375][T11349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.103352][T11375] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2214: corrupted in-inode xattr: e_value size too large
[  229.136741][T11375] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2214: couldn't read orphan inode 15 (err -117)
[  229.157961][T11375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.270445][T11375] ==================================================================
[  229.278584][T11375] BUG: KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra
[  229.286535][T11375] 
[  229.288865][T11375] write to 0xffff888118c58c90 of 8 bytes by task 11384 on cpu 0:
[  229.296598][T11375]  page_cache_sync_ra+0x434/0x6c0
[  229.301652][T11375]  filemap_get_pages+0x2d0/0x1150
[  229.306699][T11375]  filemap_splice_read+0x3a9/0x740
[  229.311825][T11375]  ext4_file_splice_read+0x8f/0xb0
[  229.316962][T11375]  splice_direct_to_actor+0x26f/0x680
[  229.322345][T11375]  do_splice_direct+0xda/0x150
[  229.327119][T11375]  do_sendfile+0x380/0x650
[  229.331548][T11375]  __x64_sys_sendfile64+0x105/0x150
[  229.336758][T11375]  x64_sys_call+0x2bb0/0x2ff0
[  229.341455][T11375]  do_syscall_64+0xd2/0x200
[  229.345972][T11375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.351873][T11375] 
[  229.354197][T11375] write to 0xffff888118c58c90 of 8 bytes by task 11375 on cpu 1:
[  229.361919][T11375]  page_cache_sync_ra+0x434/0x6c0
[  229.366962][T11375]  filemap_get_pages+0x2d0/0x1150
[  229.371993][T11375]  filemap_splice_read+0x3a9/0x740
[  229.377111][T11375]  ext4_file_splice_read+0x8f/0xb0
[  229.382250][T11375]  splice_direct_to_actor+0x26f/0x680
[  229.387630][T11375]  do_splice_direct+0xda/0x150
[  229.392397][T11375]  do_sendfile+0x380/0x650
[  229.396824][T11375]  __x64_sys_sendfile64+0x105/0x150
[  229.402119][T11375]  x64_sys_call+0x2bb0/0x2ff0
[  229.406803][T11375]  do_syscall_64+0xd2/0x200
[  229.411317][T11375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.417216][T11375] 
[  229.419544][T11375] value changed: 0x0000000000000001 -> 0x0000000000000002
[  229.426648][T11375] 
[  229.428966][T11375] Reported by Kernel Concurrency Sanitizer on:
[  229.435116][T11375] CPU: 1 UID: 0 PID: 11375 Comm: syz.4.2214 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  229.444931][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  229.454996][T11375] ==================================================================
[  229.766386][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.794652][T11394] loop1: detected capacity change from 0 to 512
[  229.801233][T11394] EXT4-fs: Ignoring removed nobh option
[  229.813835][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2219: corrupted inode contents
[  229.826277][T11394] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2219: mark_inode_dirty error
[  229.838316][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2219: corrupted inode contents
[  229.850351][T11394] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2219: mark_inode_dirty error
[  229.862130][T11394] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2219: Failed to acquire dquot type 0
[  229.874322][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2219: corrupted inode contents
[  229.886898][T11394] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2219: mark_inode_dirty error
[  229.898553][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2219: corrupted inode contents
[  229.910853][T11394] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2219: mark_inode_dirty error
[  229.922320][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2219: corrupted inode contents
[  229.934319][T11394] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  229.942987][T11394] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2219: corrupted inode contents
[  229.955185][T11394] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2219: mark_inode_dirty error
[  229.966620][T11394] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  229.976074][T11394] EXT4-fs (loop1): 1 truncate cleaned up
[  229.982247][T11394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.994782][T11394] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff)