last executing test programs:

4m14.018335603s ago: executing program 3 (id=206):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x247a, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x3}, &(0x7f0000000540)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

4m14.018032613s ago: executing program 3 (id=207):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x8000, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
close(r0)

4m13.989365655s ago: executing program 3 (id=208):
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = inotify_init1(0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r3}, 0x10)
r4 = inotify_add_watch(r1, &(0x7f0000000e00)='.\x00', 0x12000021)
r5 = dup(r1)
inotify_rm_watch(r5, r4)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe20, &(0x7f0000000dc0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40044050)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r9, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmmsg$inet6(r9, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="9d168730fdf587afe88e6d0f2f021d74f45d57c0eaa39b0d32df3f32e71583f029fc58e95b9086c2e3a077073c61af58f7b25bda1e0b36c9657b526cd1d440d2e811a9c3b94b19275de6ed4e4e9bcf2dc81a3c2f123eb290be9f88a2d71b3b8e2d5b392f5975ca862321a4eba39086fce39cc4f06bb3069fbc", 0x79}, {&(0x7f0000000240)="2922820035a975bdb6de644e6ad7afecdf9c0486b420494097bc774040ad7177f39c57ba91b4709a12fdbba86f74fa541693d37a4ae3d83f650d98c60fac131a4bcd9b79681b2cf6996d7a39a6c2603f1b578f32d1c3a26445a1b5912f5400c4ac940ce4ba78b17fe1da32b846caa9077c57dea90c8b80140e6401e954dc1a23bf39324340c9ab46318500d08b237367cefa5af0143c647655bf3a484b5c700c2ac997a8cd6caa4aeb1742bb6db485f85829319b25117a6aae6a52bf8e5a79a3c4f6", 0xc2}, {&(0x7f0000000340)="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", 0xa4e}], 0x3}}], 0x1, 0x40000)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4m13.928036449s ago: executing program 3 (id=210):
r0 = syz_io_uring_setup(0x7da5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)
r4 = getuid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRESHEX=r4], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46")
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r6 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mmap$perf(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2, 0x12, r6, 0x1000)
fallocate(r5, 0x0, 0x0, 0x1000f4)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000003c0)=[r1], 0x1)
ioperm(0x0, 0xd, 0x4000000000000020)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
iopl(0x3)
ioperm(0x0, 0x40, 0x0)
r7 = dup2(r0, r1)
io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0)

4m13.836016337s ago: executing program 3 (id=213):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00')
openat(r2, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64)

4m13.589355196s ago: executing program 3 (id=218):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14, 0x100000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', 0x0})
sendto(r3, &(0x7f0000001f80)="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", 0x1000, 0x8005, &(0x7f0000000840)=@ll={0x11, 0x4, 0x0, 0x1, 0x40, 0x6, @broadcast}, 0x80)
pipe2(&(0x7f0000000740), 0x80800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r4 = syz_io_uring_setup(0x2bc3, &(0x7f0000000140)={0x0, 0x6d89, 0x800, 0xffffffff}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000000314010000000000fbdbdf250900020073797a320000000008004100736977001400330076657468315f6d6163767461700000000900020073797a310000000008004100727865001400330073797a6b616c6c6572310000000000000900020073797a3200000000080041007278650014003300767863616e31000000000000000000000900020073797a3000000000080041007369770014003300677265300000000000000000000000000900020073797a310000000008004100736977001400330069703667726574617030"], 0xd8}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000000)='\x00\x00', 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00')
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000a40))
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x110, &(0x7f00000007c0)=0x80000001, 0x0, 0x4)
r12 = socket$inet6_dccp(0xa, 0x6, 0x0)
r13 = signalfd4(r10, &(0x7f0000000780)={[0x9f5]}, 0x8, 0x800)
connect$unix(r13, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xc801, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000940)=0x4100, 0x4)

4m13.588481457s ago: executing program 32 (id=218):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14, 0x100000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', 0x0})
sendto(r3, &(0x7f0000001f80)="321bd6aacef8f2b90d0efdcf78e5c55843e51c32ce012a8a514ee7065837f07c3f97bb2f5c330215880d31441dc7c2f66727a2c30ba892bdab809760119dac0fb6328e99fe0e8479b6eb9dcf7e56073f56526998c8ca7cd8133e25ae1a1e17f8a52d21ec45f1ee4244274a521864222e2a65fe1dcc3dba1afcc1db1f88d81098b0c2602ed797dd09034f0190bac87b555f3d33060312db8a64580ed0ff3fd00a6b22423dbab7dde4ba58b5ac1cfb19917bc8c4eae2a0439c59a819ceccca7899524058b050b20f8db3227e01ace11536e87c1ba24249a74020cc72be228ae1055f4991421433e82a53dde5d461a5e4737d308c6018598768d7c1a4218a032a143f4779932eb9a9bb65636c550d04500be924d0b6daffece85a3268b73a18e50c4fdbeeec174b43b19750d5b0003142abb7fd9b0499c8a55cc4255e48955cde0d0641b5e95239276da074732dc0311f30bc2c5ee86c50f9af1ad21683d756bd063ff289957c277ec846cee0806f1ba76ff02d78274994d5607f00fd482e705344c94cf67672bcb60d0694e8fc897f514e83959943ac8638c2e8cb2e5d43289a2ba9f48e54ce5b2cfe892bc6b6f1f2442a337e77e8adf30a190ae2fd7139e07cb6103972dc736a26a000c201a8fb4ba12612909ceaef7121affe91d1c76d6e8acd98758de3a4236ac3ede862c70410db0a3c73163325f3761eb650d14194e76d6d169c63221b158cebb91dee84e8a5b064aae1213d8b50fc43259ca902fb0243e8fa3f8fc2069ae581df3c00db68e4a0ff9ccacaa90b6a7812f9ad793e32eed587c3051400af4fabb7de65d424fc898a2f08c2b99de97e816786cdb0bc21cbbb514c92d62ce05e0a06be17a18f699cae01ec5b255797a7b1d0162dd439b86097e706ac5dd45b4ba95e6eb0441b10f067ba6c6b10021e047a618e9df5f999368e0781122e98523000eead859badb44a67f17e128c561e4a34403dafd9e1d508eaea57556bbcd99b354f41553416d55c0ea71b0f573e1a2e852361dce18a800be352e972bf7482cd7b24fe00228c8fe8c4ea0bcb7b91f680adcf1cfcb96207d41b472c7fb0d0eb02d831766cfcee3dad79e935db8746c25fb1e693d3ebba4e603e02a5029172f09bdeb066a49d55e411392c6416e2d10baeda054e51fb236549eaff492d0ddeddf394cbefdf81dbe3176253b74f652c5a36b7837983875f27269eca778255e7579239e7caf222bdc172d6a5761d49b12ccc47653926cedca74ea9fedcdb483da2da584820ebded56bfa0b4ee4a2b0f69c00a76d83ccf9da77eefd6dfc2154633b46711ad601cab52bb9664a33dffa9be84be01ac1c40973037251a7e407a8097e9d127a0e1e2f49fc7d78db17cf7cb451affcb54f3f9d638629a1d7f41285c9fbd03b8bb749d86b09d25a67e782b56cfbba8f63f02d5e66b429146dde9a204aec227f37fae3b3aa544bfe4ec5a3675dc3f51ce21374dd36ceba638922a8b7fab0e900b2a9957be606f087519341ed81e3114add42376b0bc46edfd1a1f2fa87f47571c8eeb119ff34415427735f6132d254124b1cc12015c2518579f01b728141e62270a167077004d78a48ac99c0e13853d55f8374f41ec0055ad1e505df4f4b114e27a13a0137c1474d45c9a68453a71aec52f69a2a10c44182cf54f8a2604548b886d358f1f564021d062fb5be3de1bcadf8e886beec80e70ab3dd0a0cdbfaf3519e3263547310b1743d03095e3fb02f6d29a8e357e7a993647f8774a4d800fa0e6b66935aad54ede30d420414a4ce7531ca28ac4372a197d9db7a151a079cfba93de98cda12b01b1b92806bf13f942062bce6d3c488b33f3656a3306041f9f9455d37488ab392dd617f9979e7d128360d618e8a20fcf2ea4270c353b66f4f5e3649dd64c3faf48858eb9d1d83f007a2458dc5a71320d44f8880a6232f4c35aa8589b818af5ec23b3abb54776135e1f3cdb5438d2256d143da304b3e0bb07d16043b0321c9d930f931bfe7c7d7ebfd26179d789c5d6781ab479673d68562473ce6dc3177750d2827953a1fba25fc97fccc31095bb7181c02cd9589859c15cf1ba478ea0a447f5e578d81d026bb38a841588ac5003ffbc1b9b050184b47001a09788d1586b8c3e2b5e24821386b41d8a86891385f6ed29c525be02e97684fea409008ccf3626f2b07e20dba74b003527c166a01f3ffdd8501c3ff9a28746fdca79b71da161cc1052b1a4d2520e5b1f1f6af949cd5ab11dc33b456911e43e2a264c1c4ab67f62ace4d5229f378bfb129dec227763bca772409f63785bd67701286d93f707852686cd29e4e240e81f342518d99fd954e7e1826c55d630b72121ee1a5764bbf74284658946d7138c0efc2c8f446736f2d8e480fcbd3b1e24ecb616fee064f919c92a8d5d3baf5d40858b65988029d528d375fada08555913c67e3b96d6d9911cbbcf0a74b7a2e4967d469a57a28ecdf290484b9297287b076074af768fac4c63800430fff79f79d9eee1b075c6e283f977c0464843641c498b189912e3cea2955d2d5ba598b96edd4490c9838788e8adfe25736bbbf17c650abf7a41b48cd56660f8ff93fc608f868259f4ad1435432fec5556aaaa2c2caf8e5acff611528f78300ffc041f75ba6c31158d32fea71efda97c2a828cc3f0e805bacd31bacb3514e7b93409c76a276fdfc907543c013350105a7a228417f85507aec87aec5e18748e15b79a55ed64add9a482c4334016cbb671389c857c027a70f4ef811d2aa366a2217a0fa69f035d2566ea6fcb4ad62b270e2315679de25213d023ce2401b4cb050739968f4fdb6c61e5ab16fb1fabc679cffcbd796b83afae5eb6de17e49b6b85afeb67811395e9b742d6194e196222eb9ac8ba5734f7dffe52b01e38de69d4cbfa4999ea3f167c030ae55c33897a14171d5a24fe2113203a464b1112283d30a3e3ae4b88be6d3fff8ec4f2ee0490d5228c83f4a571150f9832f17d8e6ca0df5e17a37b3cbda2e0bd18d1591997596ca1f525aa0708fc3f6ad51e8dcfbddd45e059fa4b6e341f011d3d8c33e1da0b22ed47d563f369f17e6d9a42ce71dd72ff60730c1f04e61643741719c1b4b9a8d98241510d0377d1a2d7fff0af1ef9cf7968ab465b3bcd07fd9d1ed1120880e75ae8f2b0dd87f2758a5e5dc48e56d2d00cb1e42807f7a876018638f8fd5dfd66acac87739f6cb006fc8e5000027ba716ee4adf5933948ce7829bcade0b454ee77450069c98929f3882afde31c67e37232b4d78f7f459b4758d5b63eb30480e074d5ac6d441ef4342dcea4e91bc35c49635e3218201d7e2c79076d49dfd9fe02acd88ef764563f3c5cda49ef554af3a7810d9537c8b841f5b03e148a8b860025618af946ff6ef49073df9562bc527bc2ca699fd9abe6365d630d034589606b86bdb7b53c5a64ceaa919b0877f40b0c7307c2becdbc1c472e073c852375703b50d5f54b71db63b3195a4ae441d2b143421e8d97e556072bde402b86532ef462de768e5833dd31f2ca51db86a409bdd3d95df141cfc7837bf62455365b2008f8a32e0572c06bc1feffd7da05eb3d54b7671e4b26421d98cd16de091111433429262cd5f736beebf970768878b5beb25e8b58995ca16432795ec5de98a3e0d0154625a39708e5f924c16996d8f221f31fcd90c44945d5391baafa4b285658cdbd18b1005dfdefb7d5b8265ef3db2b5e23b4ba06d6456f75909dd8d107ab8436e016d53bba20dd3b08bef4956a156d196c9d72212e93e4a25f5b50a38deb26f4ea1d043c3f42298ef869610871b456ace43e90fbf199f4e64aa1aa898858a6d45519c62f8afd17142e98278b6c9dfc5c3a4846b6708324a73ee1252bd7f9d26c26da0c3de0f285c697efd4ed7d6e2f2ad2373d7c2efdeac172e3dc24b449e2275e8608316e980efd2292dcfdf962423ddf2899363634b0ba236337194ca10689ef44ff436136135415e8445e091b0232d021bcb78a5cea7abc7949487589d546c1d439e8c46979e459d204abbbe0884efd151143e517885f8084d9cd2567c800ca8998593b823ca1398b73e04b287d123e2cfd5ff5f13638864ee2e20bd38f804c9afabb70a0ce996918c8d5b4241368a913cbacca3a6678836094abd41d1aeefae1721e8e72b2d9d78d29f58ca9af823e4d7b37545f5fa7ba7171ce52518e55ae90171ff355f03422a67cf379dea2997bd7275b6653b65909ded73c15f724fc819cd23ffc6ff11937b1c0bb8e934b4e2ef144ab178cd9bc24fafcd83307cf9ab08feef2b88861b86b037fe59ba855ee9b6548c6ff2bb5562c2acf61216fd27d8eb51de4a8119863d37ead1b5a1e534acb0dd29729b83e3e335614cab13810651147af15eb678edc440d55d0ec7f47a9201ec57bb78cedf4da7d273a06dbe981f12c1a840351d9875f585fdfb863bc7f67e9d5be9c581b0ab8179585f18f5da7396b01f596b3dd30a9fcd65a98ca86ed0ba433565dd4d248f82ff7617895f428aeceb662b4af338b39ecf66c9df61139bb8ba5bc6464abce84d2d9524be5766c9bef4dd9354417355fe1d064a97dafb10a6997ed6462cb80d2fb78839ffd1483af5112e17c438ebe18fe74415182119199f4be01d3e112517588554ea6b488356b332d83ee401ad12586036d8c8ab4b3d9408bdf8cad6eab5a168d073e417daa086194d3c4173fe3ee54b53bff1dcc0cc6d46c8e67cdb8d645f9a985142d8a7925d84bb389ae7fd52d07449139e162e29c4ec3dd12d52800c020310a19cfa6a52f28503413c6890f87b67b219c4819c9a98a6351b8b40cfcea9671ab80bfecacc4672c37f5afad30f2fc759ea0f3c22ec8f6238b52802d99aaf3454ce36d1147c2458df8bfd7b82c1afcdab34101e3f23ec0129c793d0fb30f13b91cd466f7dbc354e4e13ea105e559f8b2247bc9f8b598994e43cb6c7c9d8341c4dc3838fefb4c0425088e32fc34999ad02ca7b265be977afddd1be2bc111facaa495f6b700b720c134c7385baeade9f7de2f75537c783e76a82e34de7d543965555bf1bdf6344f05f7e357ce29152d60a06e6e1dbf9812fbcfa267b7049c2c590ca33231a4ea9991469fe59e7f08805b43819607bb96a6a84623f636ba3d02adf7899097c12718a417c66748d94043f06cdb26ebe410b78ee4f5fc81cb63a56189d916fc6a77ec76f0b625018df7b98b1cccad40ab7b997fe56ef33eee08706c727d6b059d375780b0ef3e05c72a600c331cb2b17316587c04484accc93aa4136e08e2b82d41f594516ee52c46f0c6ff2727f90e65ec59812803a59abbdfdee7da3b3d97131209a8ee5f6a89d269a5a9b5ca6be260aa0805a82dc617bf56390fb49c29cdb148d4eddb28d4e6df5fe1518483f71a52c9617c877b01f533fbcb7f1c9c76ec2d2b7d1c09fc6fa8347b613fbfed36ecde9ccdcdec4e101fdb48cca59a903fa648b4a9411383db53a88483706e14d45b4b442679ae74a11aa5c78de545beca296e6ec98ed72a35934902ad3976c024dbd5553fc6ace29d51fe8aa9147440f2f19c6a39f4bb3669fab0b0af09218bb5d7b8c7ceb56d7d91b275dd8241dc6f9554d2f90054a88046e091be8cb9801093993f52239561ee31be11d93d80adc0172d14659b6bcd40a0ebc534a2663d328a8f42c5f83aafdcafa4faf067e1b73316b3daac6f2d00830e88a9eba738c1e97760739284326e16523414719dfa67fcab806e94f2d791a59958d95f23d443d4aa58f19d59feb56ef9d027d09b831edae364c68807bf90718b604ac37", 0x1000, 0x8005, &(0x7f0000000840)=@ll={0x11, 0x4, 0x0, 0x1, 0x40, 0x6, @broadcast}, 0x80)
pipe2(&(0x7f0000000740), 0x80800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r4 = syz_io_uring_setup(0x2bc3, &(0x7f0000000140)={0x0, 0x6d89, 0x800, 0xffffffff}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000240))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000000314010000000000fbdbdf250900020073797a320000000008004100736977001400330076657468315f6d6163767461700000000900020073797a310000000008004100727865001400330073797a6b616c6c6572310000000000000900020073797a3200000000080041007278650014003300767863616e31000000000000000000000900020073797a3000000000080041007369770014003300677265300000000000000000000000000900020073797a310000000008004100736977001400330069703667726574617030"], 0xd8}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000000)='\x00\x00', 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00')
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000a40))
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x110, &(0x7f00000007c0)=0x80000001, 0x0, 0x4)
r12 = socket$inet6_dccp(0xa, 0x6, 0x0)
r13 = signalfd4(r10, &(0x7f0000000780)={[0x9f5]}, 0x8, 0x800)
connect$unix(r13, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xc801, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000940)=0x4100, 0x4)

2.121178062s ago: executing program 4 (id=4515):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x4}, 0x18)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

2.041422924s ago: executing program 4 (id=4516):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dax_inode}, {@i_version}, {@data_writeback}, {@debug}, {@lazytime}]}, 0xfd, 0x49e, &(0x7f0000000e00)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x6, 0x1, [0x7, 0xf, 0x246, 0x3, 0x0, 0x8, 0xb, 0x5, 0xc, 0x3, 0x9, 0x2, 0x0, 0x2, 0x1, 0x3], 0xb}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
unshare(0x6a040600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000003, 0x400})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e1c, 0x8}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r7 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xffff}, {0x5, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0x7fffffff, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
truncate(&(0x7f00000004c0)='./file1\x00', 0x6)

2.032902578s ago: executing program 2 (id=4517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

1.965800865s ago: executing program 2 (id=4518):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(0x0, 0x181042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f00000003c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000400)="851d", 0x2}], 0x1}, 0x4000000)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.440080087s ago: executing program 1 (id=4526):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x4}, 0x18)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

1.421589235s ago: executing program 1 (id=4527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1400, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2}}, 0x3c)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000300)='./bus/../file0\x00', 0x2041c3, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=r4], 0x1, 0x1207, &(0x7f0000002dc0)="$eJzs3E+LG2UcB/Bf49Zut+4fa622B33Qi6ehuwdPgiyyBdmAUrtCKwhTd6IhYxIyYSEiVk9efR3i0ZsgvoG99DV424vHHsQRk61t2rS6h27E/Xwu8yPP75t5HkIGJsyTg7e++7zTqrJWPozGqVPR6EekuylSNOKeV7Ynxxs3tzebza1rKV3dvL7+Zkpp5dWfP/ryh9d+GZ778MeVn87E/trHB79t/Lp/cf/SwR/XP2tXqV2lbm+Y8nSr1xvmt8oi7barTpbS+2WRV0Vqd6tiMDXeKnv9/ijl3d3lpf6gqKqUd0epU4zSsJeGg1HKP83b3ZRlWVpeCh7r9D+37Hx/t67riLo+Hc9GXdf12ViKc/FcLMdKfB0Rz8f5eCEuxItxMV6Kl+PSuOs4pg8AAAAAAAAAAAAAAAAAAAAnx5P2/6/Gmv3/AAAAAAAAAAAAAAAAAAAAcAw+uHFze7PZ3LqW0mJE+e3ezt7O5DgZ32xFO8oo4kqsxu8x3v0/MamvvtvcupLG1uKb8vZh/vbezjPT+fXx3wkc5hfGY/fy65N8ms6fiaUH8xuxGhdmn39jZn4x3nj9gXwWq3Hnk+hFGbvjc9/Pf7We0jvvNR/KXx73AQAAwP9Blv428/49yx43Pskf4feBh+6vF+LywnzXTkQ1+qKTl2UxmC4WH3lF8e+LxlN650b8RxZ4Qouzh1+aI8b/uszNf/KPFHfOP7FnzhcmjsX9D33eMwEAAAAAAAAAAOAonvKThgsx48myt+ezVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2YFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBUAAP//i0XIUQ==")
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f00000005c0)="4f592877c3", 0x5}, {0x0}], 0x2, 0x100, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680), 0x64, 0x50a, &(0x7f00000009c0)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")

1.03816524s ago: executing program 1 (id=4529):
socket$key(0xf, 0x3, 0x2)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000234, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000ff07000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800560d57ef007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0f00000000000000000000000080000000000000d651a9df01921aa9bd08489bd9b6275bce8d54e7ba1d905dc78aff17f1a64307d66d3f2842e9a73da4ab8ff57609c363b5dc8043639e56b85c757425b99a14943caa386e7112debf67c4fff27d9b3d3836967cfaaddc366ed77689827835b546c132f69f217f3c326782ae60feaaf127d6b1aeb4f9b07d7cf8d4e3ced139306915f6d46987dbb7fea8bbab9f0b0f37ffb60f7456814a66137ae1947a1d8ee318ba65624e2a328d685cb22105d48b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4080, 0xff0}}, {{0x0, 0xfffffffffffffdf9, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x2000, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0xfffd, 0x0, @mcast2, 0xa}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = io_uring_setup(0x3e45, &(0x7f00000001c0))
socket(0x10, 0x3, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
close_range(r5, 0xffffffffffffffff, 0x0)

990.971939ms ago: executing program 2 (id=4530):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, 0x0, &(0x7f0000000840)}, 0x20)

979.017364ms ago: executing program 1 (id=4531):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

927.904105ms ago: executing program 2 (id=4532):
socket$key(0xf, 0x3, 0x2)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x5, 0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000234, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000ff07000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800560d57ef007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0f00000000000000000000000080000000000000d651a9df01921aa9bd08489bd9b6275bce8d54e7ba1d905dc78aff17f1a64307d66d3f2842e9a73da4ab8ff57609c363b5dc8043639e56b85c757425b99a14943caa386e7112debf67c4fff27d9b3d3836967cfaaddc366ed77689827835b546c132f69f217f3c326782ae60feaaf127d6b1aeb4f9b07d7cf8d4e3ced139306915f6d46987dbb7fea8bbab9f0b0f37ffb60f7456814a66137ae1947a1d8ee318ba65624e2a328d685cb22105d48b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4080, 0xff0}}, {{0x0, 0xfffffffffffffdf9, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x2000, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000380)={0xa, 0xfffd, 0x0, @mcast2, 0xa}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = io_uring_setup(0x3e45, &(0x7f00000001c0))
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
close_range(r5, 0xffffffffffffffff, 0x0)

917.576189ms ago: executing program 2 (id=4533):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0xbfbfc7ed1b4522eb, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000440)="f56c5698", 0x4}], 0x1}}], 0x1, 0x18440)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f00000004c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'veth1_virt_wifi\x00'}}, 0x1e)
close_range(r1, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

899.899586ms ago: executing program 1 (id=4534):
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0x0, 0x80800)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x44040)

823.099747ms ago: executing program 1 (id=4535):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r6, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, {}, {0x100000000000000}, {}, 0xfffffffc, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

769.174799ms ago: executing program 2 (id=4536):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000110001000000000000b483fc06000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040014)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

717.82064ms ago: executing program 5 (id=4537):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x4}, 0x18)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

692.85574ms ago: executing program 5 (id=4539):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17)

673.028438ms ago: executing program 5 (id=4540):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0xa, 0x40000000002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0xc040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

599.271388ms ago: executing program 5 (id=4542):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, 0x0, &(0x7f0000000840)}, 0x20)

572.779439ms ago: executing program 5 (id=4544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

572.246349ms ago: executing program 4 (id=4545):
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0x0, 0x80800)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x44040)

566.177061ms ago: executing program 0 (id=4546):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0xbfbfc7ed1b4522eb, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000440)="f56c5698", 0x4}], 0x1}}], 0x1, 0x18440)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f00000004c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'veth1_virt_wifi\x00'}}, 0x1e)
close_range(r1, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

539.324402ms ago: executing program 4 (id=4547):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='rss_stat\x00'}, 0x18)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

521.785309ms ago: executing program 0 (id=4548):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

484.182654ms ago: executing program 0 (id=4549):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0x4}, 0x18)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno='])
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

483.791704ms ago: executing program 5 (id=4550):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000080000000801000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
syz_emit_ethernet(0xd2, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000280), &(0x7f0000000300)='system_u:object_r:bsdpty_device_t:s0\x00', 0x25, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000", @ANYRES32=0x1], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)

456.625985ms ago: executing program 0 (id=4551):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17)

436.408663ms ago: executing program 0 (id=4552):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0xa, 0x40000000002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0xc040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

261.571154ms ago: executing program 0 (id=4553):
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_connect$uac1(0x1, 0x91, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x9, 0x60, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x9}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0x8, "10b26a9a"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x0, "88a7ec56e885"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x48, 0x1, 0xa0, 0x8, 'n', "0f4f42"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x7a, 0x3, {0x7, 0x25, 0x1, 0x82, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x2, 0xc3, {0x7, 0x25, 0x1, 0x80, 0x55, 0x101}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xf, 0x3, 0x2, 0xaf, 0x81}, 0x1c, &(0x7f00000003c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "bf212fcf5db4b1ab1977cb680f983c8e"}, @ptm_cap={0x3}]}, 0xa, [{0xbf, &(0x7f00000006c0)=@string={0xbf, 0x3, "fea8f6cc049d3c1cf67c688c036212eb5fe05f5e66cba5b804c5d6b1722cda425d1f7a8e5621a777549a8c761ae7586c2e65edde4a12bf6d80e9d7b0fdb89ebe087f81f80b1b67a7c955d5ee86ebf38de14773690e0098bba43c367fb9f82c312eace291509228a4f2fd13a8304fb9bc2b987855b046c7de1ba75c66906f20422cb848fdaa41682f74660d5ca99b9ba8044a7a5b5adbe603d3e22441badcf35fb409c25ff23096b11f73abd446a9e082b707df24ff8691a51b1a800522"}}, {0x20, &(0x7f0000000500)=@string={0x20, 0x3, "cde8519fbb5c691f2a7c148672b85d89ade0788b6b91b8a16183614a3ca5"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x458}}, {0x5c, &(0x7f0000000800)=@string={0x5c, 0x3, "29536736586997f673e0ed92818f14f67ea08ce13468536491d8e8a126a7ac227b78e7d54a81a092530eea530f3db43694becf7a25f308c54bceab65860ac144612c26ee1b5596f045ffa271896f6c36ca19313bdb1247e309d4"}}, {0x7a, &(0x7f0000000880)=@string={0x7a, 0x3, "27c562d9f9b1058bd0ad8a727c93f804eb9b01d4d1e29c8ed7f741e0167de5448cc2c6d8ecab7b81de86f611ef32dd57331dc6a1b8e8851db38f9694d64a620a2bf0dd9dae2bce5d56f2b1e6a6a0c55312b8176c35f664d8740f61ee77767ebd40e5f4589ad37736a483b5efa18c3861d56a40f7b56d995c"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x1004}}, {0xcf, &(0x7f0000000980)=ANY=[@ANYBLOB="cf0312c4197aee506fece626ea02058702d92493836eb74bda182fb836987b3b5d1551757f3f2ae914ad53dbb7f2586c21fd8a85a6f189622e73ba06029e4763ef33f278d5181a1c7107c938c69fa39bdc8a047c17e238f26a3eb866c6a996257f5edb8d2a2bb8681d68e9551274cfff263b1b85ae958141d317a0f33489d98e93e54d767be8ffa333261d42ca66fc1317772f8de9d0e35e9ebdf060d785440f77d03516bc6f6d9f8cbbe15d534f3cce9e730cebe4f03a459cc5b3069e51b5a124dbbc0e188de266c9b1f446b38b35"]}, {0xaf, &(0x7f0000000a80)=@string={0xaf, 0x3, "254fb4a15d0eb6f54debefef900aa2bb447fc808a76132e30801cb2231f2cf1c2d4451d2ff3ff0119d5e46ddba9f64a5a2d403114c62134d16360be83974695d3f74d5c93673bfc84b2bbce17b618d2e56e261e7e18b38a3630ade241cdfcd5954a33fb07bbac86e5cbd1577876e3b12528e43291e8addda307eb3ced6a8907b26b690a58802c06a994a00edd8818e6dcd67188c1b41bc308075c35fdc532605e1916211d2b45f5c35ff07508f"}}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
memfd_secret(0x80000)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
sendfile(r4, r3, 0x0, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r7, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00!B', 0x3}], 0x1, 0x1000000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r8 = getpgid(0x0)
process_vm_readv(r8, &(0x7f0000000c80)=[{&(0x7f0000000d80)=""/101, 0x65}, {&(0x7f0000000e00)=""/231, 0xe7}, {&(0x7f0000000f00)=""/169, 0xa9}], 0x3, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/140, 0x8c}, {&(0x7f0000001080)=""/139, 0x8b}], 0x2, 0x0)

56.565067ms ago: executing program 4 (id=4554):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, 0x0, &(0x7f0000000840)}, 0x20)

0s ago: executing program 4 (id=4555):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(0x0, 0x181042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f00000003c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000400)="851d", 0x2}], 0x1}, 0x4000000)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r4)
keyctl$link(0x8, 0x0, r4)

kernel console output (not intermixed with test programs):

d0
[  230.582809][T12806]  ? fput+0x1c4/0x200
[  230.582862][T12806]  __x64_sys_mount+0x67/0x80
[  230.582880][T12806]  x64_sys_call+0x2c84/0x2dc0
[  230.582904][T12806]  do_syscall_64+0xc9/0x1c0
[  230.582944][T12806]  ? clear_bhb_loop+0x55/0xb0
[  230.582967][T12806]  ? clear_bhb_loop+0x55/0xb0
[  230.582989][T12806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.583011][T12806] RIP: 0033:0x7f6c4a86cde9
[  230.583026][T12806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.583046][T12806] RSP: 002b:00007f6c48ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  230.583102][T12806] RAX: ffffffffffffffda RBX: 00007f6c4aa85fa0 RCX: 00007f6c4a86cde9
[  230.583112][T12806] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[  230.583121][T12806] RBP: 00007f6c48ed7090 R08: 0000200000000000 R09: 0000000000000000
[  230.583133][T12806] R10: 00000000002a00a9 R11: 0000000000000246 R12: 0000000000000001
[  230.583145][T12806] R13: 0000000000000000 R14: 00007f6c4aa85fa0 R15: 00007ffc2714c1b8
[  230.583158][T12806]  </TASK>
[  230.798267][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.893754][T12824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  231.035011][T12828] random: crng reseeded on system resumption
[  231.082909][T12840] loop4: detected capacity change from 0 to 2048
[  231.106141][T12840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.118339][T12840] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.852689][T12856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  231.967003][T12867] 9pnet_fd: Insufficient options for proto=fd
[  232.017591][T12873] loop0: detected capacity change from 0 to 512
[  232.027079][T12873] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.3436: iget: bogus i_mode (0)
[  232.042397][T12873] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3436: couldn't read orphan inode 17 (err -117)
[  232.056288][T12873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.082198][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.123536][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.132183][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.142596][T12876] IPv6: NLM_F_CREATE should be specified when creating new route
[  232.212048][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.400904][T12879] random: crng reseeded on system resumption
[  232.736011][T12891] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  232.965762][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'.
[  233.147883][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3454'.
[  233.164510][T12918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3454'.
[  233.559125][T12927] FAULT_INJECTION: forcing a failure.
[  233.559125][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.572380][T12927] CPU: 0 UID: 0 PID: 12927 Comm: syz.2.3457 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  233.572481][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  233.572496][T12927] Call Trace:
[  233.572503][T12927]  <TASK>
[  233.572511][T12927]  dump_stack_lvl+0xf2/0x150
[  233.572543][T12927]  dump_stack+0x15/0x1a
[  233.572568][T12927]  should_fail_ex+0x24a/0x260
[  233.572648][T12927]  should_fail+0xb/0x10
[  233.572715][T12927]  should_fail_usercopy+0x1a/0x20
[  233.572737][T12927]  _copy_from_user+0x1c/0xa0
[  233.572764][T12927]  do_sock_getsockopt+0xd3/0x260
[  233.572799][T12927]  __x64_sys_getsockopt+0x18c/0x200
[  233.572869][T12927]  x64_sys_call+0x1288/0x2dc0
[  233.572900][T12927]  do_syscall_64+0xc9/0x1c0
[  233.572983][T12927]  ? clear_bhb_loop+0x55/0xb0
[  233.573040][T12927]  ? clear_bhb_loop+0x55/0xb0
[  233.573069][T12927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.573099][T12927] RIP: 0033:0x7ff7921fcde9
[  233.573116][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.573196][T12927] RSP: 002b:00007ff790867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  233.573218][T12927] RAX: ffffffffffffffda RBX: 00007ff792415fa0 RCX: 00007ff7921fcde9
[  233.573232][T12927] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000003
[  233.573246][T12927] RBP: 00007ff790867090 R08: 0000200000000100 R09: 0000000000000000
[  233.573257][T12927] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  233.573268][T12927] R13: 0000000000000000 R14: 00007ff792415fa0 R15: 00007ffe9dae75c8
[  233.573288][T12927]  </TASK>
[  233.739587][   T29] kauditd_printk_skb: 360 callbacks suppressed
[  233.739599][   T29] audit: type=1326 audit(1738894889.050:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12899 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4a86cde9 code=0x7ffc0000
[  233.770255][   T29] audit: type=1326 audit(1738894889.080:11011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12899 comm="syz.5.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4a86cde9 code=0x7ffc0000
[  233.801868][   T29] audit: type=1326 audit(1738894889.110:11012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.831052][   T29] audit: type=1326 audit(1738894889.140:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.855201][   T29] audit: type=1326 audit(1738894889.140:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.878796][   T29] audit: type=1326 audit(1738894889.140:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.878846][   T29] audit: type=1326 audit(1738894889.140:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.878875][   T29] audit: type=1326 audit(1738894889.140:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.878905][   T29] audit: type=1326 audit(1738894889.140:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.879078][   T29] audit: type=1326 audit(1738894889.140:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  233.956878][T12935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.956959][T12935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.087671][T12946] loop5: detected capacity change from 0 to 8192
[  234.210200][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'.
[  234.240339][T12960] loop2: detected capacity change from 0 to 2048
[  234.268865][T12960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.295268][T12970] loop4: detected capacity change from 0 to 2048
[  234.302167][T12960] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.342451][T12970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.354650][T12970] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.367819][T12974] random: crng reseeded on system resumption
[  234.399579][T12975] xt_TCPMSS: Only works on TCP SYN packets
[  234.538258][T12980] loop5: detected capacity change from 0 to 2048
[  234.611093][T12980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.645680][T12980] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.716898][T12983] xt_TCPMSS: Only works on TCP SYN packets
[  235.141542][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.330858][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.381118][T12997] ref_ctr_offset mismatch. inode: 0x191 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  235.467091][T12998] loop4: detected capacity change from 0 to 8192
[  235.571000][T13002] loop4: detected capacity change from 0 to 8192
[  235.617266][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3480'.
[  235.656243][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.687308][T13006] ref_ctr_offset mismatch. inode: 0x1dd offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  235.740290][T13007] loop5: detected capacity change from 0 to 512
[  235.746849][T13007] /dev/loop5: Can't open blockdev
[  235.782705][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3483'.
[  235.865256][T13015] loop1: detected capacity change from 0 to 2048
[  235.905886][T13015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.919481][T13015] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.989107][T13026] xt_TCPMSS: Only works on TCP SYN packets
[  236.006709][T13025] ref_ctr_offset mismatch. inode: 0x1f4 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  236.018249][T13027] random: crng reseeded on system resumption
[  236.066074][T13030] loop5: detected capacity change from 0 to 512
[  236.091183][T13030] /dev/loop5: Can't open blockdev
[  236.248315][T13034] loop5: detected capacity change from 0 to 8192
[  236.310811][T13037] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  236.368368][T13037] loop5: detected capacity change from 0 to 4096
[  236.405088][T13037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.558339][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.743774][T13050] ref_ctr_offset mismatch. inode: 0x1bd offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  236.785482][T13050] loop4: detected capacity change from 0 to 512
[  236.795525][T13050] /dev/loop4: Can't open blockdev
[  236.805535][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.837749][T13056] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  236.837749][T13056]    program syz.4.3499 not setting count and/or reply_len properly
[  236.935497][T13061] loop0: detected capacity change from 0 to 8192
[  237.002460][T13068] bridge0: port 3(gretap0) entered blocking state
[  237.009052][T13068] bridge0: port 3(gretap0) entered disabled state
[  237.017581][T13068] gretap0: entered allmulticast mode
[  237.023463][T13068] gretap0: entered promiscuous mode
[  237.029174][T13068] bridge0: port 3(gretap0) entered blocking state
[  237.035629][T13068] bridge0: port 3(gretap0) entered forwarding state
[  237.075638][T13070] loop0: detected capacity change from 0 to 2048
[  237.122665][T13070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.136367][T13070] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.204570][T13076] xt_TCPMSS: Only works on TCP SYN packets
[  237.517577][T13079] 9pnet_fd: Insufficient options for proto=fd
[  237.572881][T13083] ref_ctr_offset mismatch. inode: 0x216 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  237.631922][T13087] loop5: detected capacity change from 0 to 512
[  237.639826][T13087] /dev/loop5: Can't open blockdev
[  237.691094][T13090] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  237.691094][T13090]    program syz.5.3510 not setting count and/or reply_len properly
[  237.716415][T13092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.734114][T13092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.803016][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3513'.
[  238.003887][T13106] ref_ctr_offset mismatch. inode: 0x25c offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  238.042906][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.083169][T13112] 9pnet_fd: Insufficient options for proto=fd
[  238.089374][T13110] loop2: detected capacity change from 0 to 8192
[  238.108505][T13114] ref_ctr_offset mismatch. inode: 0x1b0 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  238.161362][T13118] loop0: detected capacity change from 0 to 512
[  238.167918][T13118] /dev/loop0: Can't open blockdev
[  238.790027][T13126] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  238.790027][T13126]    program syz.5.3524 not setting count and/or reply_len properly
[  238.868429][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3528'.
[  238.915171][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'.
[  238.969374][   T29] kauditd_printk_skb: 88 callbacks suppressed
[  238.969390][   T29] audit: type=1326 audit(1738894894.280:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.2.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.000817][   T29] audit: type=1326 audit(1738894894.280:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.2.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.065729][   T29] audit: type=1326 audit(1738894894.380:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.090050][   T29] audit: type=1326 audit(1738894894.380:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.117520][   T29] audit: type=1326 audit(1738894894.380:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.141031][   T29] audit: type=1326 audit(1738894894.380:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.165343][   T29] audit: type=1326 audit(1738894894.380:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.180592][T13143] 9pnet_fd: Insufficient options for proto=fd
[  239.188891][   T29] audit: type=1326 audit(1738894894.380:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.188921][   T29] audit: type=1326 audit(1738894894.380:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.243368][   T29] audit: type=1326 audit(1738894894.380:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  239.275269][T13150] ref_ctr_offset mismatch. inode: 0x1eb offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  239.308649][T13150] loop4: detected capacity change from 0 to 512
[  239.318752][T13150] /dev/loop4: Can't open blockdev
[  239.362177][T13157] loop5: detected capacity change from 0 to 2048
[  239.396633][T13157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.408792][T13157] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.093857][T13157] syz.5.3537 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  240.108752][T13157] CPU: 1 UID: 0 PID: 13157 Comm: syz.5.3537 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  240.108794][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  240.108805][T13157] Call Trace:
[  240.108809][T13157]  <TASK>
[  240.108815][T13157]  dump_stack_lvl+0xf2/0x150
[  240.108842][T13157]  dump_stack+0x15/0x1a
[  240.108863][T13157]  dump_header+0x83/0x2d0
[  240.108950][T13157]  oom_kill_process+0x341/0x4c0
[  240.108976][T13157]  out_of_memory+0x9af/0xbe0
[  240.109002][T13157]  ? css_next_descendant_pre+0x11c/0x140
[  240.109055][T13157]  mem_cgroup_out_of_memory+0x13e/0x190
[  240.109079][T13157]  try_charge_memcg+0x508/0x7f0
[  240.109111][T13157]  obj_cgroup_charge_pages+0xbd/0x1a0
[  240.109149][T13157]  __memcg_kmem_charge_page+0x9d/0x170
[  240.109193][T13157]  __alloc_frozen_pages_noprof+0x1bc/0x340
[  240.109220][T13157]  alloc_pages_mpol+0xb4/0x260
[  240.109330][T13157]  alloc_pages_noprof+0xe8/0x130
[  240.109359][T13157]  __vmalloc_node_range_noprof+0x6e5/0xe70
[  240.109436][T13157]  __kvmalloc_node_noprof+0x121/0x170
[  240.109462][T13157]  ? ip_set_alloc+0x1f/0x30
[  240.109484][T13157]  ip_set_alloc+0x1f/0x30
[  240.109523][T13157]  hash_netiface_create+0x273/0x730
[  240.109552][T13157]  ? __nla_parse+0x40/0x60
[  240.109615][T13157]  ? __pfx_hash_netiface_create+0x10/0x10
[  240.109643][T13157]  ip_set_create+0x359/0x8a0
[  240.109670][T13157]  ? __pfx_memchr+0x1/0x10
[  240.109709][T13157]  ? __nla_parse+0x40/0x60
[  240.109731][T13157]  nfnetlink_rcv_msg+0x4a9/0x570
[  240.109825][T13157]  netlink_rcv_skb+0x12c/0x230
[  240.109856][T13157]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  240.109933][T13157]  nfnetlink_rcv+0x16c/0x15d0
[  240.109953][T13157]  ? kmem_cache_free+0xdc/0x2d0
[  240.109989][T13157]  ? nlmon_xmit+0x51/0x60
[  240.110018][T13157]  ? __kfree_skb+0x102/0x150
[  240.110114][T13157]  ? consume_skb+0x49/0x160
[  240.110139][T13157]  ? nlmon_xmit+0x51/0x60
[  240.110203][T13157]  ? dev_hard_start_xmit+0x3c1/0x3f0
[  240.110234][T13157]  ? __dev_queue_xmit+0xb6e/0x2090
[  240.110260][T13157]  ? ref_tracker_free+0x3a5/0x410
[  240.110368][T13157]  ? __dev_queue_xmit+0x186/0x2090
[  240.110436][T13157]  ? __netlink_deliver_tap+0x4c6/0x4f0
[  240.110474][T13157]  netlink_unicast+0x599/0x670
[  240.110518][T13157]  netlink_sendmsg+0x5cc/0x6e0
[  240.110605][T13157]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.110638][T13157]  __sock_sendmsg+0x140/0x180
[  240.110654][T13157]  ____sys_sendmsg+0x312/0x410
[  240.110722][T13157]  __sys_sendmsg+0x19d/0x230
[  240.110759][T13157]  __x64_sys_sendmsg+0x46/0x50
[  240.110791][T13157]  x64_sys_call+0x2734/0x2dc0
[  240.110895][T13157]  do_syscall_64+0xc9/0x1c0
[  240.110937][T13157]  ? clear_bhb_loop+0x55/0xb0
[  240.110967][T13157]  ? clear_bhb_loop+0x55/0xb0
[  240.111063][T13157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.111168][T13157] RIP: 0033:0x7f6c4a86cde9
[  240.111183][T13157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.111200][T13157] RSP: 002b:00007f6c48ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.111217][T13157] RAX: ffffffffffffffda RBX: 00007f6c4aa85fa0 RCX: 00007f6c4a86cde9
[  240.111227][T13157] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  240.111237][T13157] RBP: 00007f6c4a8ee2a0 R08: 0000000000000000 R09: 0000000000000000
[  240.111247][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.111256][T13157] R13: 0000000000000000 R14: 00007f6c4aa85fa0 R15: 00007ffc2714c1b8
[  240.111343][T13157]  </TASK>
[  240.111350][T13157] memory: usage 307200kB, limit 307200kB, failcnt 5834
[  240.235302][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3542'.
[  240.236419][T13157] memory+swap: usage 308432kB, limit 9007199254740988kB, failcnt 0
[  240.383100][T13177] 9pnet_fd: Insufficient options for proto=fd
[  240.386128][T13157] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  240.386141][T13157] Memory cgroup stats for /syz5:
[  240.386679][T13157] cache 32768
[  240.509736][T13157] rss 0
[  240.512485][T13157] shmem 0
[  240.515501][T13157] mapped_file 0
[  240.518960][T13157] dirty 0
[  240.521881][T13157] writeback 12288
[  240.526217][T13157] workingset_refault_anon 1947
[  240.530983][T13157] workingset_refault_file 29
[  240.535604][T13157] swap 1261568
[  240.538964][T13157] swapcached 0
[  240.542323][T13157] pgpgin 362510
[  240.545812][T13157] pgpgout 362502
[  240.549438][T13157] pgfault 373003
[  240.552994][T13157] pgmajfault 1088
[  240.557172][T13157] inactive_anon 0
[  240.560792][T13157] active_anon 0
[  240.564251][T13157] inactive_file 32768
[  240.568273][T13157] active_file 0
[  240.571736][T13157] unevictable 0
[  240.575246][T13157] hierarchical_memory_limit 314572800
[  240.580629][T13157] hierarchical_memsw_limit 9223372036854771712
[  240.587307][T13157] total_cache 32768
[  240.591098][T13157] total_rss 0
[  240.594431][T13157] total_shmem 0
[  240.597907][T13157] total_mapped_file 0
[  240.601921][T13157] total_dirty 0
[  240.605434][T13157] total_writeback 12288
[  240.609578][T13157] total_workingset_refault_anon 1947
[  240.615374][T13157] total_workingset_refault_file 29
[  240.620494][T13157] total_swap 1261568
[  240.624448][T13157] total_swapcached 0
[  240.628405][T13157] total_pgpgin 362510
[  240.632390][T13157] total_pgpgout 362502
[  240.636534][T13157] total_pgfault 373003
[  240.640585][T13157] total_pgmajfault 1088
[  240.645346][T13157] total_inactive_anon 0
[  240.649493][T13157] total_active_anon 0
[  240.653474][T13157] total_inactive_file 32768
[  240.657978][T13157] total_active_file 0
[  240.661954][T13157] total_unevictable 0
[  240.665959][T13157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3537,pid=13156,uid=0
[  240.681242][T13157] Memory cgroup out of memory: Killed process 13156 (syz.5.3537) total-vm:95892kB, anon-rss:916kB, file-rss:22616kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  240.806058][T13187] ref_ctr_offset mismatch. inode: 0x1cc offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  240.858619][T13187] loop0: detected capacity change from 0 to 512
[  240.865299][T13187] /dev/loop0: Can't open blockdev
[  240.938552][T13192] loop0: detected capacity change from 0 to 2048
[  240.986987][T13192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.007183][T13192] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.192475][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.246594][T13203] loop5: detected capacity change from 0 to 2048
[  241.270662][T13203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.294320][T13203] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.335670][   T47] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  241.368233][T13207] xt_TCPMSS: Only works on TCP SYN packets
[  241.374646][   T47] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 474 with error 117
[  241.387319][   T47] EXT4-fs (loop0): This should not happen!! Data will be lost
[  241.387319][   T47] 
[  241.398936][T13209] loop4: detected capacity change from 0 to 2048
[  241.437674][T13209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.456046][T13209] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.592767][T13214] 9pnet_fd: Insufficient options for proto=fd
[  241.624033][  T384] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set
[  241.625529][T13215] xt_TCPMSS: Only works on TCP SYN packets
[  241.641519][  T384] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117
[  241.657006][  T384] EXT4-fs (loop5): This should not happen!! Data will be lost
[  241.657006][  T384] 
[  241.711409][T13217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.721894][T13217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.964940][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.079064][T13225] ref_ctr_offset mismatch. inode: 0x1e3 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  242.167551][T13228] loop0: detected capacity change from 0 to 512
[  242.177215][T13230] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  242.177215][T13230]    program syz.2.3561 not setting count and/or reply_len properly
[  242.184734][T13228] /dev/loop0: Can't open blockdev
[  242.451719][T13241] loop0: detected capacity change from 0 to 512
[  242.461494][T13241] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.3566: iget: bogus i_mode (0)
[  242.472971][T13241] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3566: couldn't read orphan inode 17 (err -117)
[  242.485842][T13241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.546415][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.558684][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.569102][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.602241][T13248] loop4: detected capacity change from 0 to 512
[  242.610367][T13248] EXT4-fs (loop4): orphan cleanup on readonly fs
[  242.617749][T13248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3570: bg 0: block 248: padding at end of block bitmap is not set
[  242.632629][T13248] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3570: Failed to acquire dquot type 1
[  242.644529][T13248] EXT4-fs (loop4): 1 truncate cleaned up
[  242.650768][T13248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  242.664554][T13248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.716155][T13260] ref_ctr_offset mismatch. inode: 0x22b offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  242.768959][T13261] loop4: detected capacity change from 0 to 512
[  242.776522][T13261] /dev/loop4: Can't open blockdev
[  242.890542][T13262] random: crng reseeded on system resumption
[  242.960570][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3576'.
[  243.106314][T13273] loop2: detected capacity change from 0 to 2048
[  243.115807][T13273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.128011][T13273] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.194194][T13277] xt_TCPMSS: Only works on TCP SYN packets
[  243.631570][T13288] loop0: detected capacity change from 0 to 512
[  243.646461][T13290] ref_ctr_offset mismatch. inode: 0x288 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  243.676303][T13288] EXT4-fs (loop0): orphan cleanup on readonly fs
[  243.684980][T13288] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3584: bg 0: block 248: padding at end of block bitmap is not set
[  243.714250][T13288] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.3584: Failed to acquire dquot type 1
[  243.727151][T13292] loop5: detected capacity change from 0 to 512
[  243.733661][T13292] /dev/loop5: Can't open blockdev
[  243.733816][T13288] EXT4-fs (loop0): 1 truncate cleaned up
[  243.805694][T13288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  243.819802][T13288] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.285719][T13320] ref_ctr_offset mismatch. inode: 0x259 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  244.318162][T13320] loop4: detected capacity change from 0 to 512
[  244.324722][T13320] /dev/loop4: Can't open blockdev
[  244.343527][T13321] random: crng reseeded on system resumption
[  244.364744][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.839770][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3606'.
[  244.841231][   T29] kauditd_printk_skb: 227 callbacks suppressed
[  244.841245][   T29] audit: type=1326 audit(1738894900.150:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  244.881240][   T29] audit: type=1326 audit(1738894900.160:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  244.905486][   T29] audit: type=1326 audit(1738894900.160:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  244.958926][   T29] audit: type=1326 audit(1738894900.190:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  244.983168][   T29] audit: type=1326 audit(1738894900.190:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  245.008060][   T29] audit: type=1326 audit(1738894900.270:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  245.031676][   T29] audit: type=1326 audit(1738894900.270:11347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  245.055881][   T29] audit: type=1326 audit(1738894900.270:11348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  245.083239][   T29] audit: type=1326 audit(1738894900.320:11349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  245.091017][T13347] loop0: detected capacity change from 0 to 2048
[  245.107545][   T29] audit: type=1326 audit(1738894900.320:11350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  245.155553][T13347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.167965][T13347] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.238168][T13352] xt_TCPMSS: Only works on TCP SYN packets
[  245.736921][T13380] 9pnet_fd: Insufficient options for proto=fd
[  245.799277][T13382] loop1: detected capacity change from 0 to 2048
[  245.825998][T13385] random: crng reseeded on system resumption
[  245.890538][T13382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.923420][T13382] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.041376][T13075] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  246.122184][T13387] xt_TCPMSS: Only works on TCP SYN packets
[  246.267047][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.278029][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3623'.
[  246.407560][T13400] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  246.575272][T13411] loop2: detected capacity change from 0 to 2048
[  246.606658][T13411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.621005][T13416] 9pnet_fd: Insufficient options for proto=fd
[  246.624946][T13411] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.686064][T13419] loop0: detected capacity change from 0 to 2048
[  246.711985][   T47] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  246.742518][T13419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.743057][   T47] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 53 with error 117
[  246.764246][T13419] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.767736][   T47] EXT4-fs (loop1): This should not happen!! Data will be lost
[  246.767736][   T47] 
[  246.849911][T13427] xt_TCPMSS: Only works on TCP SYN packets
[  247.300015][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.594726][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'.
[  247.622555][T13445] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  247.793358][T13447] random: crng reseeded on system resumption
[  247.861608][T13454] loop4: detected capacity change from 0 to 2048
[  247.878714][T13454] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.345900][ T3969] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  248.386981][ T3969] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 261 with error 117
[  248.399606][ T3969] EXT4-fs (loop4): This should not happen!! Data will be lost
[  248.399606][ T3969] 
[  248.457223][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3654'.
[  248.599494][T13489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  248.793549][T13495] loop5: detected capacity change from 0 to 2048
[  248.827496][T13495] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.153099][T13505] random: crng reseeded on system resumption
[  249.384477][T13521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  249.512442][   T47] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  249.530347][T13523] loop4: detected capacity change from 0 to 8192
[  249.539798][   T47] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117
[  249.552638][   T47] EXT4-fs (loop5): This should not happen!! Data will be lost
[  249.552638][   T47] 
[  249.604268][T13525] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  249.604268][T13525]    program syz.4.3671 not setting count and/or reply_len properly
[  249.801493][T13534] ref_ctr_offset mismatch. inode: 0x2c6 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  249.909664][T13535] loop4: detected capacity change from 0 to 8192
[  250.027234][T13545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  250.080070][T13553] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  250.080070][T13553]    program syz.2.3682 not setting count and/or reply_len properly
[  250.168070][T13555] loop5: detected capacity change from 0 to 8192
[  250.183825][T13563] ref_ctr_offset mismatch. inode: 0x27d offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  250.240547][T13565] ref_ctr_offset mismatch. inode: 0x2e8 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  250.265024][T13563] loop0: detected capacity change from 0 to 8192
[  250.333617][T13567] loop5: detected capacity change from 0 to 8192
[  250.358872][T13566] random: crng reseeded on system resumption
[  250.408091][T13576] ref_ctr_offset mismatch. inode: 0x2f4 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  250.436368][T13578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  250.462365][T13579] loop5: detected capacity change from 0 to 512
[  250.469557][T13579] /dev/loop5: Can't open blockdev
[  250.475049][   T29] kauditd_printk_skb: 185 callbacks suppressed
[  250.475062][   T29] audit: type=1326 audit(1738894905.790:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.504931][   T29] audit: type=1326 audit(1738894905.790:11537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.1.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.608676][T13590] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  250.661450][T13596] ref_ctr_offset mismatch. inode: 0x2a7 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  250.710584][T13596] loop1: detected capacity change from 0 to 8192
[  250.746320][   T29] audit: type=1326 audit(1738894906.060:11538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.770858][   T29] audit: type=1326 audit(1738894906.060:11539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.794971][   T29] audit: type=1326 audit(1738894906.060:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.818532][   T29] audit: type=1326 audit(1738894906.060:11541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.842737][   T29] audit: type=1326 audit(1738894906.060:11542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.867053][   T29] audit: type=1326 audit(1738894906.060:11543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.890625][   T29] audit: type=1326 audit(1738894906.060:11544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  250.914982][   T29] audit: type=1326 audit(1738894906.060:11545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13598 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  251.032804][T13604] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  251.248498][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'.
[  251.409817][T13622] ref_ctr_offset mismatch. inode: 0x2c2 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  251.472041][T13631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  251.530708][T13627] loop1: detected capacity change from 0 to 8192
[  251.566135][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3716'.
[  251.630527][T13639] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  251.630527][T13639]    program syz.1.3718 not setting count and/or reply_len properly
[  251.689223][T13635] random: crng reseeded on system resumption
[  251.770527][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3722'.
[  251.832118][T13656] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  252.129596][T13685] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  252.175110][T13689] 9pnet_fd: Insufficient options for proto=fd
[  252.288006][T13698] ref_ctr_offset mismatch. inode: 0x2ae offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  252.339779][T13698] loop0: detected capacity change from 0 to 512
[  252.347591][T13698] /dev/loop0: Can't open blockdev
[  252.416721][T13712] 9pnet_fd: Insufficient options for proto=fd
[  252.638822][T13720] random: crng reseeded on system resumption
[  252.895991][T13727] ref_ctr_offset mismatch. inode: 0x345 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  252.915768][T13728] loop2: detected capacity change from 0 to 512
[  252.922415][T13728] /dev/loop2: Can't open blockdev
[  252.980646][T13731] 9pnet_fd: Insufficient options for proto=fd
[  253.002500][T13733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  253.065773][T13739] 9pnet_fd: Insufficient options for proto=fd
[  253.142975][T13746] loop1: detected capacity change from 0 to 8192
[  253.243585][T13755] ref_ctr_offset mismatch. inode: 0x2c0 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  253.296797][T13756] loop0: detected capacity change from 0 to 512
[  253.303209][T13756] /dev/loop0: Can't open blockdev
[  253.329436][T13758] 9pnet_fd: Insufficient options for proto=fd
[  253.358974][T13760] ref_ctr_offset mismatch. inode: 0x2cd offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  253.419371][T13760] loop0: detected capacity change from 0 to 8192
[  253.431861][T13768] 9pnet_fd: Insufficient options for proto=fd
[  253.501319][T13778] ref_ctr_offset mismatch. inode: 0x35e offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  253.528277][T13776] loop0: detected capacity change from 0 to 8192
[  253.554956][T13779] loop5: detected capacity change from 0 to 512
[  253.561571][T13779] /dev/loop5: Can't open blockdev
[  253.574432][T13781] 9pnet_fd: Insufficient options for proto=fd
[  253.675972][T13791] 9pnet_fd: Insufficient options for proto=fd
[  253.721679][T13794] ref_ctr_offset mismatch. inode: 0x2fb offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  253.775667][T13794] loop0: detected capacity change from 0 to 8192
[  253.811557][T13802] random: crng reseeded on system resumption
[  253.852911][T13804] loop0: detected capacity change from 0 to 2048
[  253.928851][T13804] EXT4-fs mount: 6 callbacks suppressed
[  253.928863][T13804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.949547][T13804] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.173270][T13814] ref_ctr_offset mismatch. inode: 0x344 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  254.226737][T13815] loop1: detected capacity change from 0 to 512
[  254.233200][T13815] /dev/loop1: Can't open blockdev
[  254.350523][T13820] 9pnet_fd: Insufficient options for proto=fd
[  254.536975][T13830] 9pnet_fd: Insufficient options for proto=fd
[  254.583383][T13834] loop5: detected capacity change from 0 to 2048
[  254.611152][T13838] loop4: detected capacity change from 0 to 512
[  254.678233][T13834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.692596][T13834] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.726262][T13838] EXT4-fs (loop4): orphan cleanup on readonly fs
[  254.734150][T13838] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3802: bg 0: block 248: padding at end of block bitmap is not set
[  254.763149][T13838] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3802: Failed to acquire dquot type 1
[  254.775667][T13838] EXT4-fs (loop4): 1 truncate cleaned up
[  254.782317][T13838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  254.787247][T13844] xt_TCPMSS: Only works on TCP SYN packets
[  254.816767][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.832295][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.895016][T13850] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  255.066560][T13863] 9pnet_fd: Insufficient options for proto=fd
[  255.174556][T13869] loop0: detected capacity change from 0 to 512
[  255.199447][T13869] EXT4-fs (loop0): orphan cleanup on readonly fs
[  255.233286][T13869] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3814: bg 0: block 248: padding at end of block bitmap is not set
[  255.259378][T13869] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.3814: Failed to acquire dquot type 1
[  255.276542][T13869] EXT4-fs (loop0): 1 truncate cleaned up
[  255.338279][T13880] random: crng reseeded on system resumption
[  255.349442][T13869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  255.381392][T13869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.454411][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'.
[  255.485505][T13884] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  255.562206][T13892] 9pnet_fd: Insufficient options for proto=fd
[  255.638460][T13902] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  255.656894][T13903] 9pnet_fd: Insufficient options for proto=fd
[  255.763992][T13909] 9pnet_fd: Insufficient options for proto=fd
[  255.832564][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.947246][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3832'.
[  256.282897][T13928] 9pnet_fd: Insufficient options for proto=fd
[  256.310786][T13930] loop4: detected capacity change from 0 to 2048
[  256.326360][T13930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.338679][T13930] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.413749][T13935] xt_TCPMSS: Only works on TCP SYN packets
[  256.453219][T13939] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  256.490268][T13942] 9pnet_fd: Insufficient options for proto=fd
[  256.616636][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'.
[  256.781518][T13956] random: crng reseeded on system resumption
[  256.861623][T13959] 9pnet_fd: Insufficient options for proto=fd
[  256.927652][T13962] loop1: detected capacity change from 0 to 2048
[  256.947639][T13962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.961836][T13962] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.439951][T13969] loop0: detected capacity change from 0 to 512
[  257.447927][   T29] kauditd_printk_skb: 74 callbacks suppressed
[  257.447940][   T29] audit: type=1326 audit(1738894912.750:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  257.478341][   T29] audit: type=1326 audit(1738894912.750:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  257.502077][   T29] audit: type=1326 audit(1738894912.750:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  257.526757][   T29] audit: type=1326 audit(1738894912.750:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  257.550338][   T29] audit: type=1326 audit(1738894912.750:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  257.574682][   T29] audit: type=1326 audit(1738894912.750:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  257.598440][   T29] audit: type=1326 audit(1738894912.750:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  257.614595][T13976] 9pnet_fd: Insufficient options for proto=fd
[  257.622801][   T29] audit: type=1326 audit(1738894912.750:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff478e0ce23 code=0x7ffc0000
[  257.652597][   T29] audit: type=1326 audit(1738894912.750:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff478e0b89f code=0x7ffc0000
[  257.656753][T13969] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.3848: iget: bogus i_mode (0)
[  257.676763][   T29] audit: type=1326 audit(1738894912.750:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff478e0ce77 code=0x7ffc0000
[  257.719505][T13969] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3848: couldn't read orphan inode 17 (err -117)
[  257.783066][T13969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.860904][   T47] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  257.883702][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.893741][   T47] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117
[  257.906552][   T47] EXT4-fs (loop4): This should not happen!! Data will be lost
[  257.906552][   T47] 
[  257.927777][T13980] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  257.982897][T13982] 9pnet_fd: Insufficient options for proto=fd
[  258.210734][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.242732][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.280681][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.289124][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.310555][T13997] 9pnet_fd: Insufficient options for proto=fd
[  258.519027][T14000] random: crng reseeded on system resumption
[  258.600376][T14005] loop2: detected capacity change from 0 to 512
[  258.609200][T14005] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.3861: iget: bogus i_mode (0)
[  258.620954][T14005] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3861: couldn't read orphan inode 17 (err -117)
[  258.633512][T14005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.655545][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.688155][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'.
[  258.852397][T14012] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  258.890819][T14014] loop2: detected capacity change from 0 to 2048
[  258.907967][T14014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.920897][T14014] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.942196][T14022] loop0: detected capacity change from 0 to 2048
[  258.957595][T14022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.971205][T14022] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.989094][T14026] xt_TCPMSS: Only works on TCP SYN packets
[  259.358566][T14034] loop5: detected capacity change from 0 to 2048
[  259.556655][T14034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.580585][T14034] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.703265][T14041] xt_TCPMSS: Only works on TCP SYN packets
[  259.842637][T14048] loop1: detected capacity change from 0 to 512
[  259.873226][T14048] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.3872: iget: bogus i_mode (0)
[  259.941030][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.952647][T14048] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3872: couldn't read orphan inode 17 (err -117)
[  260.014440][T14048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.044966][T14052] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  260.062371][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.100286][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.137594][T14055] 9pnet_fd: Insufficient options for proto=fd
[  260.214853][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'.
[  260.241683][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3881'.
[  260.392835][ T3969] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  260.409734][ T3969] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 274 with error 117
[  260.422370][ T3969] EXT4-fs (loop5): This should not happen!! Data will be lost
[  260.422370][ T3969] 
[  260.492288][T14064] random: crng reseeded on system resumption
[  260.511701][T14077] loop2: detected capacity change from 0 to 2048
[  260.588554][T14077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.618461][T14077] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.914991][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.979281][T14086] loop5: detected capacity change from 0 to 512
[  260.994521][T14086] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.3886: iget: bogus i_mode (0)
[  261.022744][T14086] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3886: couldn't read orphan inode 17 (err -117)
[  261.092319][T14086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.104523][ T3969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  261.138834][ T3969] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117
[  261.151576][ T3969] EXT4-fs (loop2): This should not happen!! Data will be lost
[  261.151576][ T3969] 
[  261.173434][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.198918][T14091] 9pnet_fd: Insufficient options for proto=fd
[  261.327997][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3892'.
[  261.354089][T14105] ref_ctr_offset mismatch. inode: 0x384 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  261.517264][T14110] loop0: detected capacity change from 0 to 8192
[  261.554243][T14114] loop4: detected capacity change from 0 to 512
[  261.666836][T14114] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.3897: iget: bogus i_mode (0)
[  261.678480][T14114] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3897: couldn't read orphan inode 17 (err -117)
[  261.693688][T14114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.743849][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.779444][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.790240][T14124] 9pnet_fd: Insufficient options for proto=fd
[  261.830198][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3903'.
[  261.840784][T14127] ref_ctr_offset mismatch. inode: 0x3a0 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  261.898653][T14127] loop4: detected capacity change from 0 to 8192
[  261.916454][T14135] random: crng reseeded on system resumption
[  262.019561][T14142] loop4: detected capacity change from 0 to 512
[  262.038217][T14142] EXT4-fs (loop4): orphan cleanup on readonly fs
[  262.045265][T14142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3907: bg 0: block 248: padding at end of block bitmap is not set
[  262.061869][T14142] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3907: Failed to acquire dquot type 1
[  262.069548][T14147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  262.074096][T14142] EXT4-fs (loop4): 1 truncate cleaned up
[  262.098570][T14142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  262.111469][T14142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.198514][T14153] loop1: detected capacity change from 0 to 512
[  262.207509][T14153] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.3912: iget: bogus i_mode (0)
[  262.219625][T14153] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3912: couldn't read orphan inode 17 (err -117)
[  262.232533][T14153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.251845][T14156] 9pnet_fd: Insufficient options for proto=fd
[  262.259370][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.295170][T14162] ref_ctr_offset mismatch. inode: 0x3c3 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  262.348632][T14165] loop4: detected capacity change from 0 to 512
[  262.355114][T14165] /dev/loop4: Can't open blockdev
[  262.474513][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  262.474524][   T29] audit: type=1326 audit(1738894917.780:11798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.504419][   T29] audit: type=1326 audit(1738894917.790:11799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.528026][   T29] audit: type=1326 audit(1738894917.790:11800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.551732][   T29] audit: type=1326 audit(1738894917.790:11801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.559058][T14184] loop4: detected capacity change from 0 to 512
[  262.575318][   T29] audit: type=1326 audit(1738894917.790:11802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.575350][   T29] audit: type=1326 audit(1738894917.790:11803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.578344][   T29] audit: type=1326 audit(1738894917.890:11804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.610485][T14184] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.3924: iget: bogus i_mode (0)
[  262.629293][   T29] audit: type=1326 audit(1738894917.890:11805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.4.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  262.657707][T14187] 9pnet_fd: Insufficient options for proto=fd
[  262.668718][T14184] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3924: couldn't read orphan inode 17 (err -117)
[  262.716498][T14184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.763186][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.925979][T14197] ref_ctr_offset mismatch. inode: 0x3ef offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  262.944882][T14206] 9pnet_fd: Insufficient options for proto=fd
[  262.951301][T14206] 9pnet_fd: Insufficient options for proto=fd
[  262.957878][T14207] 9pnet_fd: Insufficient options for proto=fd
[  262.967188][T14208] loop1: detected capacity change from 0 to 512
[  262.973761][T14208] /dev/loop1: Can't open blockdev
[  263.028302][T14212] loop0: detected capacity change from 0 to 2048
[  263.066823][T14212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.081389][T14212] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.340124][T14222] loop1: detected capacity change from 0 to 512
[  263.365172][T14222] EXT4-fs (loop1): orphan cleanup on readonly fs
[  263.372091][T14222] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3937: bg 0: block 248: padding at end of block bitmap is not set
[  263.409882][T14222] Quota error (device loop1): write_blk: dquota write failed
[  263.417299][T14222] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  263.427340][T14222] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3937: Failed to acquire dquot type 1
[  263.447714][T14222] EXT4-fs (loop1): 1 truncate cleaned up
[  263.453938][T14222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.467480][T14222] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.508313][T14228] 9pnet_fd: Insufficient options for proto=fd
[  263.717487][T14239] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  263.935390][T14250] random: crng reseeded on system resumption
[  264.191225][T14256] 9pnet_fd: Insufficient options for proto=fd
[  264.213819][T14258] 9pnet_fd: Insufficient options for proto=fd
[  264.223854][T14258] 9pnet_fd: Insufficient options for proto=fd
[  264.307439][T14264] 9pnet_fd: Insufficient options for proto=fd
[  264.313743][T14264] 9pnet_fd: Insufficient options for proto=fd
[  264.433620][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.604772][T14283] 9pnet_fd: Insufficient options for proto=fd
[  264.745258][T14300] loop1: detected capacity change from 0 to 512
[  264.753084][T14300] EXT4-fs (loop1): orphan cleanup on readonly fs
[  264.760001][T14300] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3969: bg 0: block 248: padding at end of block bitmap is not set
[  264.776378][T14300] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3969: Failed to acquire dquot type 1
[  264.788362][T14300] EXT4-fs (loop1): 1 truncate cleaned up
[  264.794915][T14300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  264.807728][T14300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.932114][T14302] random: crng reseeded on system resumption
[  265.032765][T14309] loop1: detected capacity change from 0 to 8192
[  265.352580][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3982'.
[  265.458819][T14334] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  265.520052][T14336] loop0: detected capacity change from 0 to 8192
[  265.595511][T14342] loop0: detected capacity change from 0 to 2048
[  265.616653][T14342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.629028][T14342] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.707171][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.915450][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'.
[  266.926996][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4003'.
[  267.272350][T14413] FAULT_INJECTION: forcing a failure.
[  267.272350][T14413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.286041][T14413] CPU: 1 UID: 0 PID: 14413 Comm: syz.2.4015 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  267.286067][T14413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  267.286080][T14413] Call Trace:
[  267.286086][T14413]  <TASK>
[  267.286093][T14413]  dump_stack_lvl+0xf2/0x150
[  267.286146][T14413]  dump_stack+0x15/0x1a
[  267.286169][T14413]  should_fail_ex+0x24a/0x260
[  267.286198][T14413]  should_fail+0xb/0x10
[  267.286323][T14413]  should_fail_usercopy+0x1a/0x20
[  267.286342][T14413]  _copy_from_user+0x1c/0xa0
[  267.286430][T14413]  ____sys_sendmsg+0x1a4/0x410
[  267.286470][T14413]  __sys_sendmsg+0x19d/0x230
[  267.286515][T14413]  __x64_sys_sendmsg+0x46/0x50
[  267.286545][T14413]  x64_sys_call+0x2734/0x2dc0
[  267.286577][T14413]  do_syscall_64+0xc9/0x1c0
[  267.286656][T14413]  ? clear_bhb_loop+0x55/0xb0
[  267.286689][T14413]  ? clear_bhb_loop+0x55/0xb0
[  267.286722][T14413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.286755][T14413] RIP: 0033:0x7ff7921fcde9
[  267.286776][T14413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.286836][T14413] RSP: 002b:00007ff790867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.286855][T14413] RAX: ffffffffffffffda RBX: 00007ff792415fa0 RCX: 00007ff7921fcde9
[  267.286948][T14413] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004
[  267.286960][T14413] RBP: 00007ff790867090 R08: 0000000000000000 R09: 0000000000000000
[  267.286971][T14413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.286982][T14413] R13: 0000000000000000 R14: 00007ff792415fa0 R15: 00007ffe9dae75c8
[  267.286999][T14413]  </TASK>
[  267.511229][T14426] 9pnet_fd: Insufficient options for proto=fd
[  267.535098][T14428] ref_ctr_offset mismatch. inode: 0x450 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  267.588482][T14430] loop4: detected capacity change from 0 to 512
[  267.594998][T14430] /dev/loop4: Can't open blockdev
[  267.613773][   T29] kauditd_printk_skb: 142 callbacks suppressed
[  267.613783][   T29] audit: type=1326 audit(1738894922.920:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  267.643765][   T29] audit: type=1326 audit(1738894922.920:11947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  267.667382][   T29] audit: type=1326 audit(1738894922.930:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  267.690995][   T29] audit: type=1326 audit(1738894922.930:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  267.714580][   T29] audit: type=1326 audit(1738894922.930:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  267.738326][   T29] audit: type=1326 audit(1738894923.010:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  267.761928][   T29] audit: type=1326 audit(1738894923.010:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14431 comm="syz.4.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31818cde9 code=0x7ffc0000
[  267.870911][   T29] audit: type=1326 audit(1738894923.180:11953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  267.895526][   T29] audit: type=1326 audit(1738894923.180:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  267.919268][   T29] audit: type=1326 audit(1738894923.180:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.1.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  267.979318][T14445] sg_write: data in/out 115/120 bytes for SCSI command 0x0-- guessing data in;
[  267.979318][T14445]    program syz.1.4027 not setting count and/or reply_len properly
[  268.917031][T14477] loop1: detected capacity change from 0 to 1024
[  268.923876][T14477] ext4: Unknown parameter 'fsname'
[  268.981108][T14487] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  269.013698][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'.
[  269.641636][T14510] loop4: detected capacity change from 0 to 8192
[  270.123755][T14533] loop2: detected capacity change from 0 to 2048
[  270.135808][T14533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.147920][T14533] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.192905][T14540] loop5: detected capacity change from 0 to 2048
[  270.218184][T14540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.239517][T14540] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.725712][T14551] ref_ctr_offset mismatch. inode: 0x493 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  270.746004][T14553] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  270.776154][T14554] loop4: detected capacity change from 0 to 512
[  270.794572][T14554] /dev/loop4: Can't open blockdev
[  271.129011][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.167125][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.948967][T14591] loop0: detected capacity change from 0 to 512
[  271.958929][T14591] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4082: iget: bogus i_mode (0)
[  271.970462][T14591] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4082: couldn't read orphan inode 17 (err -117)
[  271.982986][T14591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.007917][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.092009][T14604] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  272.706713][T14612] 9pnet_fd: Insufficient options for proto=fd
[  272.795388][   T29] kauditd_printk_skb: 220 callbacks suppressed
[  272.795403][   T29] audit: type=1326 audit(1738894928.110:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.826893][   T29] audit: type=1326 audit(1738894928.110:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.850684][   T29] audit: type=1326 audit(1738894928.140:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.874850][   T29] audit: type=1326 audit(1738894928.140:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.874880][   T29] audit: type=1326 audit(1738894928.140:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.874970][   T29] audit: type=1326 audit(1738894928.140:12179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.874994][   T29] audit: type=1326 audit(1738894928.140:12180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.875018][   T29] audit: type=1326 audit(1738894928.140:12181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.875103][   T29] audit: type=1326 audit(1738894928.140:12182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  272.875132][   T29] audit: type=1326 audit(1738894928.140:12183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.1.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  273.037246][T14622] loop5: detected capacity change from 0 to 512
[  273.039416][T14622] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.4093: iget: bogus i_mode (0)
[  273.083310][T14622] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4093: couldn't read orphan inode 17 (err -117)
[  273.098568][T14622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.132448][T14629] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  273.153612][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.518896][T14645] 9pnet_fd: Insufficient options for proto=fd
[  273.540395][T14647] loop4: detected capacity change from 0 to 128
[  273.582530][T14647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.606433][T14649] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  274.045768][T14655] loop2: detected capacity change from 0 to 8192
[  274.088483][T14661] loop0: detected capacity change from 0 to 512
[  274.102317][T14661] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4109: iget: bogus i_mode (0)
[  274.123303][T14661] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4109: couldn't read orphan inode 17 (err -117)
[  274.137229][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.148288][T14661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.160418][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.181742][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.605277][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'.
[  274.738175][T14690] loop2: detected capacity change from 0 to 128
[  274.839380][T14691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.339056][T14693] loop1: detected capacity change from 0 to 8192
[  275.448602][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4123'.
[  275.648987][T14705] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  275.900990][T14716] loop2: detected capacity change from 0 to 8192
[  275.957151][T14729] loop2: detected capacity change from 0 to 128
[  276.047235][T14736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.939366][T14755] loop0: detected capacity change from 0 to 2048
[  276.955834][T14755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.967972][T14755] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.173399][T14770] random: crng reseeded on system resumption
[  277.574854][T14778] loop5: detected capacity change from 0 to 512
[  277.595948][T14778] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.4155: iget: bogus i_mode (0)
[  277.608398][T14778] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4155: couldn't read orphan inode 17 (err -117)
[  277.681176][T14778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.798608][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.846381][T14791] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  277.935608][T14792] loop2: detected capacity change from 0 to 8192
[  278.000626][T14802] loop2: detected capacity change from 0 to 2048
[  278.084532][T14802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.101313][T14802] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.129838][  T384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set
[  278.160806][  T384] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117
[  278.173499][  T384] EXT4-fs (loop0): This should not happen!! Data will be lost
[  278.173499][  T384] 
[  278.177117][T14810] xt_TCPMSS: Only works on TCP SYN packets
[  278.401616][T14814] random: crng reseeded on system resumption
[  278.643584][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.699778][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'.
[  278.731061][   T47] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  278.747229][   T47] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117
[  278.759922][   T47] EXT4-fs (loop2): This should not happen!! Data will be lost
[  278.759922][   T47] 
[  278.787053][   T29] kauditd_printk_skb: 144 callbacks suppressed
[  278.787069][   T29] audit: type=1326 audit(1738894934.100:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  278.826739][T14819] loop0: detected capacity change from 0 to 512
[  278.865880][T14819] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4169: iget: bogus i_mode (0)
[  278.891896][   T29] audit: type=1326 audit(1738894934.130:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  278.915539][   T29] audit: type=1326 audit(1738894934.130:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  278.939454][   T29] audit: type=1326 audit(1738894934.130:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  278.963043][   T29] audit: type=1326 audit(1738894934.130:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  278.967221][T14819] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4169: couldn't read orphan inode 17 (err -117)
[  278.986807][   T29] audit: type=1326 audit(1738894934.130:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  278.986842][   T29] audit: type=1326 audit(1738894934.140:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff478e0cde9 code=0x7ffc0000
[  278.986879][   T29] audit: type=1326 audit(1738894934.140:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff478e0ce23 code=0x7ffc0000
[  278.986911][   T29] audit: type=1326 audit(1738894934.140:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff478e0b89f code=0x7ffc0000
[  278.986965][   T29] audit: type=1326 audit(1738894934.140:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14818 comm="syz.0.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff478e0ce77 code=0x7ffc0000
[  279.129835][T14829] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4174'.
[  279.135814][T14819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.227543][T14831] loop4: detected capacity change from 0 to 8192
[  279.242772][T14835] loop5: detected capacity change from 0 to 2048
[  279.251099][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.334916][T14839] loop0: detected capacity change from 0 to 2048
[  279.353326][T14835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.369826][T14839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.382447][T14835] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.395100][T14839] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.440677][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.303024][T14871] loop1: detected capacity change from 0 to 512
[  280.311306][T14871] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.4188: iget: bogus i_mode (0)
[  280.323855][T14871] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.4188: couldn't read orphan inode 17 (err -117)
[  280.646321][T14884] random: crng reseeded on system resumption
[  280.750279][T14883] loop2: detected capacity change from 0 to 2048
[  280.775494][T14883] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.905911][T14892] ref_ctr_offset mismatch. inode: 0x48b offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  280.988798][T14892] loop5: detected capacity change from 0 to 8192
[  281.068045][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4196'.
[  281.080518][T14904] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4197'.
[  281.162658][T14910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  281.250635][T14912] loop0: detected capacity change from 0 to 512
[  281.272012][T14914] loop5: detected capacity change from 0 to 128
[  281.276341][T14912] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4201: iget: bogus i_mode (0)
[  281.291802][T14912] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4201: couldn't read orphan inode 17 (err -117)
[  281.330250][T14914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.398324][T14919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.409622][T14919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.449935][T14924] loop5: detected capacity change from 0 to 512
[  281.457479][T14924] EXT4-fs: dax option not supported
[  281.889369][T14933] ref_ctr_offset mismatch. inode: 0x552 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  281.996662][T14935] loop1: detected capacity change from 0 to 8192
[  282.301707][T14944] random: crng reseeded on system resumption
[  282.365033][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4211'.
[  282.508331][T14953] loop0: detected capacity change from 0 to 512
[  282.533158][T14953] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4214: iget: bogus i_mode (0)
[  282.545211][T14953] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4214: couldn't read orphan inode 17 (err -117)
[  282.560349][T14957] loop2: detected capacity change from 0 to 2048
[  282.578341][T14957] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.702293][T14970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4220'.
[  282.729473][T14973] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  282.762414][T14975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.770974][T14975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.851118][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4223'.
[  283.063563][T14983] loop1: detected capacity change from 0 to 512
[  283.077583][T14983] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.4226: iget: bogus i_mode (0)
[  283.089362][T14983] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.4226: couldn't read orphan inode 17 (err -117)
[  283.149352][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4230'.
[  283.220120][T15002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4232'.
[  283.426333][T15012] random: crng reseeded on system resumption
[  284.099766][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  284.099781][   T29] audit: type=1326 audit(1738894939.410:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  284.132843][T15024] loop2: detected capacity change from 0 to 512
[  284.139937][   T29] audit: type=1326 audit(1738894939.440:12456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  284.163623][   T29] audit: type=1326 audit(1738894939.440:12457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  284.187512][   T29] audit: type=1326 audit(1738894939.440:12458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  284.198619][T15024] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.4239: iget: bogus i_mode (0)
[  284.211117][   T29] audit: type=1326 audit(1738894939.440:12459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  284.224691][T15024] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.4239: couldn't read orphan inode 17 (err -117)
[  284.245874][   T29] audit: type=1326 audit(1738894939.440:12460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  284.245903][   T29] audit: type=1326 audit(1738894939.440:12461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff7921fcde9 code=0x7ffc0000
[  284.245933][   T29] audit: type=1326 audit(1738894939.440:12462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7921fce23 code=0x7ffc0000
[  284.245961][   T29] audit: type=1326 audit(1738894939.440:12463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff7921fb89f code=0x7ffc0000
[  284.246041][   T29] audit: type=1326 audit(1738894939.440:12464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15023 comm="syz.2.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff7921fce77 code=0x7ffc0000
[  284.362017][T15029] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  284.387226][T15024] EXT4-fs mount: 14 callbacks suppressed
[  284.387245][T15024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.419369][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.436608][T15031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4244'.
[  284.475902][T15036] loop4: detected capacity change from 0 to 2048
[  284.492949][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.504925][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.521079][T15036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.536830][T15036] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.609114][T15052] xt_TCPMSS: Only works on TCP SYN packets
[  285.257269][T15067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4255'.
[  285.270984][T15065] loop1: detected capacity change from 0 to 512
[  285.296544][T15065] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.4254: iget: bogus i_mode (0)
[  285.312301][T15065] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.4254: couldn't read orphan inode 17 (err -117)
[  285.348847][T15065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.378678][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.559715][T15080] loop1: detected capacity change from 0 to 2048
[  285.599114][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.611790][T15080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.630275][T15080] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.701361][T15100] loop0: detected capacity change from 0 to 512
[  285.710577][T15100] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4266: iget: bogus i_mode (0)
[  285.735225][T15100] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4266: couldn't read orphan inode 17 (err -117)
[  285.755548][T15100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.798552][T15106] loop5: detected capacity change from 0 to 128
[  285.881980][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.909226][T15112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.947172][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4272'.
[  286.570832][T15124] loop2: detected capacity change from 0 to 2048
[  286.597060][T15124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.609295][T15124] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.694649][T15134] xt_TCPMSS: Only works on TCP SYN packets
[  286.761141][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.843066][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4282'.
[  286.967120][T15152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4285'.
[  287.115311][T15160] random: crng reseeded on system resumption
[  287.205034][T15165] ref_ctr_offset mismatch. inode: 0x5c4 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  287.249459][T15165] loop1: detected capacity change from 0 to 512
[  287.258195][T15165] /dev/loop1: Can't open blockdev
[  287.310082][T15167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.793663][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4296'.
[  287.811621][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.918752][T15190] ref_ctr_offset mismatch. inode: 0x579 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  287.947280][T15190] loop4: detected capacity change from 0 to 512
[  287.954031][T15190] /dev/loop4: Can't open blockdev
[  287.999417][T15198] loop2: detected capacity change from 0 to 128
[  288.032377][T15200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4305'.
[  288.088432][T15205] loop0: detected capacity change from 0 to 2048
[  288.096618][T15206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  288.116197][T15205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.128828][T15205] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.340022][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.557390][T15235] loop5: detected capacity change from 0 to 2048
[  288.576265][T15235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.588429][T15235] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.846236][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.915514][T15267] netlink: 76 bytes leftover after parsing attributes in process `GPL'.
[  289.015985][T15278] FAULT_INJECTION: forcing a failure.
[  289.015985][T15278] name failslab, interval 1, probability 0, space 0, times 0
[  289.029208][T15278] CPU: 1 UID: 0 PID: 15278 Comm: syz.4.4338 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  289.029240][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  289.029253][T15278] Call Trace:
[  289.029260][T15278]  <TASK>
[  289.029267][T15278]  dump_stack_lvl+0xf2/0x150
[  289.029297][T15278]  dump_stack+0x15/0x1a
[  289.029319][T15278]  should_fail_ex+0x24a/0x260
[  289.029387][T15278]  should_failslab+0x8f/0xb0
[  289.029409][T15278]  kmem_cache_alloc_noprof+0x52/0x320
[  289.029448][T15278]  ? audit_log_start+0x34c/0x6b0
[  289.029483][T15278]  audit_log_start+0x34c/0x6b0
[  289.029553][T15278]  audit_seccomp+0x4b/0x130
[  289.029579][T15278]  __seccomp_filter+0x6fa/0x1180
[  289.029603][T15278]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  289.029625][T15278]  ? vfs_write+0x644/0x920
[  289.029642][T15278]  ? putname+0xcf/0xf0
[  289.029766][T15278]  __secure_computing+0x9f/0x1c0
[  289.029789][T15278]  syscall_trace_enter+0xd1/0x1f0
[  289.029808][T15278]  ? fpregs_assert_state_consistent+0x83/0xa0
[  289.029926][T15278]  do_syscall_64+0xaa/0x1c0
[  289.029950][T15278]  ? clear_bhb_loop+0x55/0xb0
[  289.030058][T15278]  ? clear_bhb_loop+0x55/0xb0
[  289.030109][T15278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.030134][T15278] RIP: 0033:0x7fc31818cde9
[  289.030147][T15278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.030162][T15278] RSP: 002b:00007fc3167f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  289.030268][T15278] RAX: ffffffffffffffda RBX: 00007fc3183a5fa0 RCX: 00007fc31818cde9
[  289.030281][T15278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fc318edf000
[  289.030294][T15278] RBP: 00007fc3167f1090 R08: 0000000000000000 R09: 0000000000000000
[  289.030306][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.030366][T15278] R13: 0000000000000000 R14: 00007fc3183a5fa0 R15: 00007fff28d86e58
[  289.030384][T15278]  </TASK>
[  289.348608][T15291] loop0: detected capacity change from 0 to 164
[  289.359593][T15292] loop5: detected capacity change from 0 to 128
[  289.367546][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4344'.
[  289.480073][T15300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.639150][   T29] kauditd_printk_skb: 202 callbacks suppressed
[  289.639178][   T29] audit: type=1326 audit(1738894944.950:12665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.669293][   T29] audit: type=1326 audit(1738894944.950:12666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.692909][   T29] audit: type=1326 audit(1738894944.950:12667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.716617][   T29] audit: type=1326 audit(1738894944.950:12668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.740265][   T29] audit: type=1326 audit(1738894944.950:12669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.764031][   T29] audit: type=1326 audit(1738894944.950:12670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.787656][   T29] audit: type=1326 audit(1738894944.950:12671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.811294][   T29] audit: type=1326 audit(1738894944.950:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.834919][   T29] audit: type=1326 audit(1738894944.950:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  289.858493][   T29] audit: type=1326 audit(1738894944.950:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  290.368188][T15341] loop0: detected capacity change from 0 to 2048
[  290.397048][T15341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.409494][T15344] loop4: detected capacity change from 0 to 512
[  290.416734][T15341] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.434106][T15350] loop5: detected capacity change from 0 to 164
[  290.463065][T15344] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.4366: iget: bogus i_mode (0)
[  290.477049][T15344] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4366: couldn't read orphan inode 17 (err -117)
[  290.488015][T15354] xt_TCPMSS: Only works on TCP SYN packets
[  290.495392][T15344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.570757][T15353] loop5: detected capacity change from 0 to 8192
[  290.578165][T15356] loop1: detected capacity change from 0 to 128
[  290.599803][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.701022][T15365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.889663][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4378'.
[  291.348875][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.379589][T15389] loop0: detected capacity change from 0 to 512
[  291.388114][T15389] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4381: iget: bogus i_mode (0)
[  291.400753][T15389] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4381: couldn't read orphan inode 17 (err -117)
[  291.413542][T15389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.438196][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.447295][T15392] loop1: detected capacity change from 0 to 2048
[  291.465273][T15392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.478189][T15392] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.750172][T15412] loop0: detected capacity change from 0 to 512
[  291.780977][T15416] loop5: detected capacity change from 0 to 2048
[  291.789055][T15412] EXT4-fs (loop0): orphan cleanup on readonly fs
[  291.796453][T15412] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4389: bg 0: block 248: padding at end of block bitmap is not set
[  291.822545][T15419] loop2: detected capacity change from 0 to 128
[  291.831372][T15416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.854233][T15412] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4389: Failed to acquire dquot type 1
[  291.867063][T15416] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.879050][T15412] EXT4-fs (loop0): 1 truncate cleaned up
[  291.887685][T15412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  291.918331][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.959834][T15423] loop0: detected capacity change from 0 to 512
[  291.967034][T15424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.995245][T15427] xt_TCPMSS: Only works on TCP SYN packets
[  291.995520][T15423] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4393: iget: bogus i_mode (0)
[  292.022628][T15423] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4393: couldn't read orphan inode 17 (err -117)
[  292.052797][T15423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.165929][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.747090][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4402'.
[  292.925151][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.936660][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.985209][T15463] loop1: detected capacity change from 0 to 512
[  292.993319][T15463] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.4407: iget: bogus i_mode (0)
[  293.004826][T15463] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.4407: couldn't read orphan inode 17 (err -117)
[  293.017934][T15463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.040518][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.224065][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4410'.
[  293.338554][T15480] loop1: detected capacity change from 0 to 2048
[  293.376456][T15480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.388556][T15480] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.455490][T15486] xt_TCPMSS: Only works on TCP SYN packets
[  293.528531][T15488] ref_ctr_offset mismatch. inode: 0x5e4 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  293.628822][T15490] loop4: detected capacity change from 0 to 8192
[  293.659181][T15488] loop4: detected capacity change from 0 to 512
[  293.684523][T15488] EXT4-fs (loop4): orphan cleanup on readonly fs
[  293.713241][T15488] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4416: bg 0: block 248: padding at end of block bitmap is not set
[  293.745311][T15488] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4416: Failed to acquire dquot type 1
[  293.789684][T15488] EXT4-fs (loop4): 1 truncate cleaned up
[  293.812869][T15488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  293.844626][T15488] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.874383][T15496] 9pnet_fd: Insufficient options for proto=fd
[  294.039497][T15515] loop4: detected capacity change from 0 to 2048
[  294.075382][T15515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.093501][T15515] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.216436][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4431'.
[  294.259106][T15530] ref_ctr_offset mismatch. inode: 0x641 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  294.351297][T15530] loop0: detected capacity change from 0 to 8192
[  294.395483][T15530] loop0: detected capacity change from 0 to 512
[  294.474239][T15530] EXT4-fs (loop0): orphan cleanup on readonly fs
[  294.492440][T15530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4432: bg 0: block 248: padding at end of block bitmap is not set
[  294.515991][T15530] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4432: Failed to acquire dquot type 1
[  294.530046][T15530] EXT4-fs (loop0): 1 truncate cleaned up
[  294.531112][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.536341][T15530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  294.562373][T15530] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.693462][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'.
[  295.083989][   T29] kauditd_printk_skb: 196 callbacks suppressed
[  295.084005][   T29] audit: type=1326 audit(1738894950.370:12865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.113876][   T29] audit: type=1326 audit(1738894950.370:12866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.137477][   T29] audit: type=1326 audit(1738894950.370:12867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.161075][   T29] audit: type=1326 audit(1738894950.370:12868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.184693][   T29] audit: type=1326 audit(1738894950.370:12869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.208272][   T29] audit: type=1326 audit(1738894950.370:12870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.238304][T15563] loop1: detected capacity change from 0 to 512
[  295.262458][   T29] audit: type=1326 audit(1738894950.570:12871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.286154][   T29] audit: type=1326 audit(1738894950.570:12872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.1.4443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b7a6cde9 code=0x7ffc0000
[  295.311887][T15563] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.4443: iget: bogus i_mode (0)
[  295.369716][T15563] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.4443: couldn't read orphan inode 17 (err -117)
[  295.383203][T15563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.415923][T15569] loop5: detected capacity change from 0 to 128
[  295.427879][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.440326][T11214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.450231][T15571] ref_ctr_offset mismatch. inode: 0x663 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  295.518055][T15581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  295.544635][T15571] loop0: detected capacity change from 0 to 8192
[  295.578369][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4452'.
[  295.592301][T15571] loop0: detected capacity change from 0 to 512
[  295.602538][T15571] EXT4-fs (loop0): orphan cleanup on readonly fs
[  295.614926][T15571] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4446: bg 0: block 248: padding at end of block bitmap is not set
[  295.631792][T15571] Quota error (device loop0): write_blk: dquota write failed
[  295.639353][T15571] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  295.649411][T15571] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4446: Failed to acquire dquot type 1
[  295.663182][T15571] EXT4-fs (loop0): 1 truncate cleaned up
[  295.669745][T15571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  295.682896][T15571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.123817][T15603] loop2: detected capacity change from 0 to 512
[  296.132114][T15603] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.4458: iget: bogus i_mode (0)
[  296.166936][T15603] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.4458: couldn't read orphan inode 17 (err -117)
[  296.180834][T15603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.205752][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.282030][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4464'.
[  296.309368][T15623] 9pnet_fd: Insufficient options for proto=fd
[  296.371406][T15631] loop2: detected capacity change from 0 to 512
[  296.389514][T15631] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.4469: iget: bogus i_mode (0)
[  296.401390][T15631] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.4469: couldn't read orphan inode 17 (err -117)
[  296.414007][T15631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.436440][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.465835][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4471'.
[  296.582186][T15645] loop4: detected capacity change from 0 to 2048
[  296.612863][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4477'.
[  296.692716][T15645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.707575][T15645] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.910613][T15661] loop0: detected capacity change from 0 to 512
[  296.989499][T15661] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.4481: iget: bogus i_mode (0)
[  297.012270][T15661] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4481: couldn't read orphan inode 17 (err -117)
[  297.044956][T15661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.112923][T15673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.113829][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.130583][T15673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.222313][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4488'.
[  297.369560][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'.
[  297.768767][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.881360][T15698] 9pnet_fd: Insufficient options for proto=fd
[  297.910688][T15701] loop4: detected capacity change from 0 to 512
[  297.926219][T15705] loop2: detected capacity change from 0 to 128
[  297.941152][T15701] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.4497: iget: bogus i_mode (0)
[  297.953758][T15701] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4497: couldn't read orphan inode 17 (err -117)
[  297.969371][T15701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.004445][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.010142][T15712] loop0: detected capacity change from 0 to 2048
[  298.049684][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4503'.
[  298.059954][T15712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.076036][T15723] 9pnet_fd: Insufficient options for proto=fd
[  298.085214][T15722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  298.113164][T15712] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.188347][T15729] xt_TCPMSS: Only works on TCP SYN packets
[  298.683480][T15605] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  298.808271][T15744] loop5: detected capacity change from 0 to 512
[  298.849141][T15744] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.4513: iget: bogus i_mode (0)
[  298.881246][T15744] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4513: couldn't read orphan inode 17 (err -117)
[  298.883869][T15754] 9pnet_fd: Insufficient options for proto=fd
[  298.901173][T15744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.941463][T15752] loop4: detected capacity change from 0 to 2048
[  298.958847][T11743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.972710][T15756] loop2: detected capacity change from 0 to 128
[  299.004605][T15752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.018337][T15752] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.096041][T15764] xt_TCPMSS: Only works on TCP SYN packets
[  299.125284][T15766] loop1: detected capacity change from 0 to 164
[  299.150455][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4520'.
[  299.185289][T15769] 9pnet_fd: Insufficient options for proto=fd
[  299.191837][T15769] 9pnet_fd: Insufficient options for proto=fd
[  299.354968][T15774] loop1: detected capacity change from 0 to 128
[  299.371612][T15774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  299.563837][T15781] loop1: detected capacity change from 0 to 8192
[  299.868399][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.099358][T15800] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[  300.156154][T15801] 9pnet_fd: Insufficient options for proto=fd
[  300.333815][T11916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.391305][T15833] 9pnet_fd: Insufficient options for proto=fd
[  300.430393][T15836] 9pnet_fd: Insufficient options for proto=fd
[  300.658761][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.677408][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.871730][T15852] loop4: detected capacity change from 0 to 128
[  300.928969][    T9] ==================================================================
[  300.937061][    T9] BUG: KCSAN: data-race in p9_conn_cancel / p9_poll_workfn
[  300.944269][    T9] 
[  300.946588][    T9] write to 0xffff888164f81828 of 4 bytes by task 4264 on cpu 1:
[  300.954203][    T9]  p9_conn_cancel+0x89/0x400
[  300.958790][    T9]  p9_write_work+0x3ac/0x750
[  300.963387][    T9]  process_scheduled_works+0x483/0x9a0
[  300.968849][    T9]  worker_thread+0x51d/0x6f0
[  300.973426][    T9]  kthread+0x4ae/0x520
[  300.977490][    T9]  ret_from_fork+0x4b/0x60
[  300.981900][    T9]  ret_from_fork_asm+0x1a/0x30
[  300.986659][    T9] 
[  300.988969][    T9] read to 0xffff888164f81828 of 4 bytes by task 9 on cpu 0:
[  300.996282][    T9]  p9_poll_workfn+0xc0/0x410
[  301.000903][    T9]  process_scheduled_works+0x483/0x9a0
[  301.006388][    T9]  worker_thread+0x51d/0x6f0
[  301.010976][    T9]  kthread+0x4ae/0x520
[  301.015051][    T9]  ret_from_fork+0x4b/0x60
[  301.019473][    T9]  ret_from_fork_asm+0x1a/0x30
[  301.024250][    T9] 
[  301.026569][    T9] value changed: 0x00000000 -> 0xffffffe0
[  301.032272][    T9] 
[  301.034593][    T9] Reported by Kernel Concurrency Sanitizer on:
[  301.040734][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0
[  301.051233][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  301.061279][    T9] Workqueue: events p9_poll_workfn
[  301.066396][    T9] ==================================================================
[  301.080172][T15853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.