last executing test programs:

10.602896346s ago: executing program 0 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x2, 0x0, &(0x7f0000000100))
unshare(0x64000600)

8.356142289s ago: executing program 0 (id=446):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@noload}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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")
syz_open_procfs(0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

7.130455662s ago: executing program 3 (id=450):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000580)={0x0, 0x1, 0x0, 0xa527})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180), 0x2, 0x0, 0xff31}, 0x8800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

7.096707473s ago: executing program 2 (id=451):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
acct(&(0x7f0000000300)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)

6.210266821s ago: executing program 3 (id=454):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
acct(&(0x7f0000000300)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00)

6.062082163s ago: executing program 3 (id=456):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x40}]})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002720000850000004300000095"], 0x0, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
close(0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)

6.040600133s ago: executing program 2 (id=457):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0)

5.20361262s ago: executing program 3 (id=460):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x1b, 0x0, 0x1, 0x401, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c6c71616e31323700"], 0x8)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000e1fae19002b14e571451277906000000010000000000000b01000000040000000000000e0100000002000000050000000000000b040000000c0000000000fa7a7b90890708af0941213ca69c622a7b7e9a2690ecff82cda05ffdbb9ebedf0645d7"], &(0x7f0000000680)=""/4096, 0x52, 0x1000, 0x0, 0x40}, 0x28)

5.066128012s ago: executing program 2 (id=462):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff19181200", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

4.703366129s ago: executing program 0 (id=464):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r2}, 0x10)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}], [], 0x6b}})
r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0xfffffffb)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250)

3.963335023s ago: executing program 0 (id=465):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sync()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

3.835878176s ago: executing program 4 (id=468):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x19, &(0x7f0000000580)="1f", 0x1)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@orlov}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@data_err_ignore}, {@quota}]}, 0x61, 0x553, &(0x7f0000000a40)="$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")
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r2], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000640)='cachefiles_link\x00', r3, 0x0, 0x400000000000000}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x1, 0x1}}, 0x40)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r5 = socket(0x10, 0x3, 0x9)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x7fffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x1000)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x105, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000740)='svcrdma_decode_wseg\x00', r10}, 0x18)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000800)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008034)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)

3.775647277s ago: executing program 0 (id=469):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
unshare(0x64000600)

3.755021177s ago: executing program 3 (id=470):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
unshare(0x62040200)

3.190045038s ago: executing program 2 (id=471):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x248)
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x40814)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
prctl$PR_SET_NAME(0xf, &(0x7f0000000180))
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
pidfd_getfd(0xffffffffffffffff, r2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

2.345548365s ago: executing program 4 (id=472):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0)

2.135772629s ago: executing program 1 (id=474):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x3}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(0xffffffffffffffff)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[], 0x53)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2.119274839s ago: executing program 2 (id=475):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil)

2.015273131s ago: executing program 1 (id=476):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r2}, 0x10)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}], [], 0x6b}})
r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0xfffffffb)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)

1.877871873s ago: executing program 1 (id=477):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900000000000800110000000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.833812764s ago: executing program 0 (id=478):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x2004, &(0x7f0000000680))

1.793649595s ago: executing program 1 (id=479):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
unshare(0x62040200)

1.208987157s ago: executing program 4 (id=480):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sync()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200000a000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.071735689s ago: executing program 4 (id=481):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='sys_enter\x00', r5, 0x0, 0xfff}, 0x18)
nanosleep(0x0, &(0x7f0000000540))
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvfrom$inet6(r6, 0x0, 0x0, 0x2120, 0x0, 0x0)
write$P9_RWRITE(r3, &(0x7f00000002c0)={0xb, 0x77, 0x2, 0x8930}, 0xb)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x12, &(0x7f0000000100), 0x1, 0x4c9, &(0x7f0000000b40)="$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")

873.466513ms ago: executing program 1 (id=482):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@rand_addr, <r2=>0x0}, &(0x7f0000000580)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f0}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}]}, 0x0, 0xff, 0xe1, &(0x7f0000000440)=""/225, 0x41100, 0x1, '\x00', r2, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x1, 0x3, 0x261}, 0x10, 0x0, r0, 0x7, &(0x7f0000000800)=[0x1, r0], &(0x7f0000000840)=[{0x4, 0x5, 0x1, 0xb}, {0x0, 0x5, 0xf, 0x7}, {0x5, 0x2, 0x4, 0x6}, {0x4, 0x5, 0xb, 0x8}, {0x4, 0x2, 0xb, 0xc}, {0x3, 0x1, 0xa, 0x2}, {0x1, 0x4, 0x7, 0xc}], 0x10, 0x10000}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68012}, 0x40440c0)

816.202944ms ago: executing program 3 (id=483):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x1b, 0x0, 0x1, 0x401, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c6c71616e31323700"], 0x8)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000e1fae19002b14e571451277906000000010000000000000b01000000040000000000000e0100000002000000050000000000000b040000000c0000000000fa7a7b90890708af0941213ca69c622a7b7e9a2690ecff82cda05ffdbb9ebedf0645d7"], &(0x7f0000000680)=""/4096, 0x52, 0x1000, 0x0, 0x40}, 0x28)

630.142357ms ago: executing program 1 (id=484):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x19, &(0x7f0000000580)="1f", 0x1)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@orlov}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@data_err_ignore}, {@quota}]}, 0x61, 0x553, &(0x7f0000000a40)="$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")
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000640)='cachefiles_link\x00', r3, 0x0, 0x400000000000000}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x1, 0x1}}, 0x40)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r5 = socket(0x10, 0x3, 0x9)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x7fffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x1000)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x105, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000740)='svcrdma_decode_wseg\x00', r10}, 0x18)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000800)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008034)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)

82.245638ms ago: executing program 4 (id=485):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)

20.356589ms ago: executing program 4 (id=486):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r0}, 0x18)
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
unshare(0x64000600)

0s ago: executing program 2 (id=487):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@noload}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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")
syz_open_procfs(0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

t_r:fs_t tclass=filesystem permissive=1
[   39.680723][  T298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.687450][ T3469] syz.1.2 (3469) used greatest stack depth: 9760 bytes left
[   39.707403][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.725970][  T298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.775299][ T3478] netlink: 'syz.1.6': attribute type 1 has an invalid length.
[   39.778404][  T298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.827724][  T298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.872172][  T298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.897559][  T298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.960723][ T3485] loop2: detected capacity change from 0 to 512
[   39.974249][ T3485] =======================================================
[   39.974249][ T3485] WARNING: The mand mount option has been deprecated and
[   39.974249][ T3485]          and is ignored by this kernel. Remove the mand
[   39.974249][ T3485]          option from the mount to silence this warning.
[   39.974249][ T3485] =======================================================
[   39.981214][  T298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.067906][ T3485] ext4: Unknown parameter 'nouser_xattr'
[   40.077172][ T3487] Zero length message leads to an empty skb
[   40.092019][ T3487] loop0: detected capacity change from 0 to 512
[   40.188190][ T3486] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4'.
[   40.233053][ T3487] EXT4-fs (loop0): orphan cleanup on readonly fs
[   40.240369][ T3487] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[   40.250822][ T3487] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   40.260415][ T3487] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.1: Failed to acquire dquot type 1
[   40.296440][ T3487] EXT4-fs (loop0): 1 truncate cleaned up
[   41.045963][ T3487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.574286][ T3485] loop2: detected capacity change from 0 to 1024
[   41.833453][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.862826][   T29] audit: type=1400 audit(1759324374.055:100): avc:  denied  { firmware_load } for  pid=3490 comm="syz.1.7" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   41.974055][  T298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.999571][ T3496] loop3: detected capacity change from 0 to 1024
[   42.016856][ T3496] EXT4-fs: Ignoring removed orlov option
[   42.058737][ T3499] loop0: detected capacity change from 0 to 1024
[   42.067431][ T3499] EXT4-fs: Ignoring removed orlov option
[   42.208500][ T3501] ip6erspan0: entered promiscuous mode
[   42.214283][ T3501] ip6erspan0: entered allmulticast mode
[   42.959688][ T3485] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[   42.959728][ T3485] EXT4-fs: failed to create workqueue
[   42.975446][ T3485] EXT4-fs (loop2): mount failed
[   42.985760][ T3499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.986466][ T3496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.019098][   T29] audit: type=1400 audit(1759324375.325:101): avc:  denied  { add_name } for  pid=3495 comm="syz.3.8" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.039828][   T29] audit: type=1400 audit(1759324375.325:102): avc:  denied  { create } for  pid=3495 comm="syz.3.8" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.059806][   T29] audit: type=1400 audit(1759324375.355:103): avc:  denied  { read open } for  pid=3495 comm="syz.3.8" path="/1/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.070194][ T3506] loop1: detected capacity change from 0 to 1024
[   43.082491][   T29] audit: type=1400 audit(1759324375.355:104): avc:  denied  { write } for  pid=3495 comm="syz.3.8" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   43.111286][ T3506] EXT4-fs: Ignoring removed orlov option
[   43.200950][ T3506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.728108][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.911791][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.914443][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.948228][   T29] audit: type=1400 audit(1759324376.255:105): avc:  denied  { read write } for  pid=3524 comm="syz.3.14" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   44.000120][ T3530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   44.007630][ T3530] IPv6: NLM_F_CREATE should be set when creating new route
[   44.023931][ T3533] loop1: detected capacity change from 0 to 1024
[   44.031068][ T3533] EXT4-fs: Ignoring removed orlov option
[   44.132405][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.152368][ T3540] netlink: 'syz.2.19': attribute type 1 has an invalid length.
[   44.161711][ T3538] loop0: detected capacity change from 0 to 512
[   44.192057][ T3538] ext4: Unknown parameter 'nouser_xattr'
[   44.239250][ T3538] loop0: detected capacity change from 0 to 1024
[   44.266680][ T3538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.369235][ T3538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.402198][ T3538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.959345][ T3557] netlink: 'syz.3.21': attribute type 4 has an invalid length.
[   45.265571][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.361423][ T3560] loop1: detected capacity change from 0 to 1024
[   45.368670][ T3560] EXT4-fs: Ignoring removed orlov option
[   45.408038][ T3560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.456998][ T3564] loop4: detected capacity change from 0 to 1024
[   45.495307][ T3564] EXT4-fs: Ignoring removed orlov option
[   45.536210][ T3564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.748146][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   45.748165][   T29] audit: type=1400 audit(1759324378.055:116): avc:  denied  { create } for  pid=3571 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   45.809036][ T3574] ip6erspan0: entered promiscuous mode
[   45.810156][   T29] audit: type=1400 audit(1759324378.105:117): avc:  denied  { create } for  pid=3571 comm=77DEA105FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   45.814637][ T3574] ip6erspan0: entered allmulticast mode
[   45.835340][   T29] audit: type=1400 audit(1759324378.105:118): avc:  denied  { write } for  pid=3571 comm=77DEA105FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   45.861935][   T29] audit: type=1400 audit(1759324378.115:119): avc:  denied  { bind } for  pid=3571 comm=77DEA105FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   45.882791][   T29] audit: type=1400 audit(1759324378.115:120): avc:  denied  { setopt } for  pid=3571 comm=77DEA105FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   45.903934][   T29] audit: type=1400 audit(1759324378.115:121): avc:  denied  { ioctl } for  pid=3571 comm="kfree" path="socket:[5124]" dev="sockfs" ino=5124 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   45.939812][   T29] audit: type=1400 audit(1759324378.245:122): avc:  denied  { create } for  pid=3571 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.960204][   T29] audit: type=1400 audit(1759324378.245:123): avc:  denied  { read } for  pid=3571 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.999871][   T29] audit: type=1400 audit(1759324378.295:124): avc:  denied  { write } for  pid=3571 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.471662][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.539959][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.651742][ T3581] loop4: detected capacity change from 0 to 1024
[   46.847744][ T3581] EXT4-fs: Ignoring removed orlov option
[   46.898254][ T3581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.169579][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.246065][ T3591] loop2: detected capacity change from 0 to 1024
[   47.253152][ T3591] EXT4-fs: Ignoring removed i_version option
[   47.267085][ T3591] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   47.293462][ T3591] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.28: Invalid block bitmap block 0 in block_group 0
[   47.308182][ T3591] Quota error (device loop2): write_blk: dquota write failed
[   47.315966][ T3591] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.28: Failed to acquire dquot type 0
[   47.419538][ T3590] loop0: detected capacity change from 0 to 1024
[   47.454631][ T3590] EXT4-fs: Ignoring removed orlov option
[   47.485398][ T3591] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.28: Freeing blocks not in datazone - block = 0, count = 4096
[   47.499443][ T3591] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.28: Invalid inode bitmap blk 0 in block_group 0
[   47.513934][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0
[   47.528253][ T3591] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   47.538928][ T3591] EXT4-fs (loop2): 1 orphan inode deleted
[   47.545491][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.759338][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.263375][ T3591] syz.2.28 (3591) used greatest stack depth: 9488 bytes left
[   48.733073][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.918399][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.009418][ T3606] loop4: detected capacity change from 0 to 1024
[   49.028257][ T3606] EXT4-fs: Ignoring removed orlov option
[   49.060790][ T3606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.523415][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.777704][ T3619] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   50.730861][ T3625] loop1: detected capacity change from 0 to 512
[   50.951177][ T3625] ext4: Unknown parameter 'nouser_xattr'
[   51.007586][ T3625] loop1: detected capacity change from 0 to 1024
[   51.219230][ T3625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.282644][   T29] kauditd_printk_skb: 2 callbacks suppressed
[   51.282661][   T29] audit: type=1400 audit(1759324383.555:125): avc:  denied  { create } for  pid=3629 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.308736][   T29] audit: type=1400 audit(1759324383.565:126): avc:  denied  { create } for  pid=3629 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   51.327891][   T29] audit: type=1400 audit(1759324383.575:127): avc:  denied  { allowed } for  pid=3629 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   51.347157][   T29] audit: type=1400 audit(1759324383.575:128): avc:  denied  { sqpoll } for  pid=3629 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   51.392363][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.446175][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.536689][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.011905][ T3695] loop2: detected capacity change from 0 to 512
[   52.069893][ T3695] EXT4-fs (loop2): orphan cleanup on readonly fs
[   52.079770][ T3695] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[   52.090489][ T3695] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   52.100059][ T3695] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.40: Failed to acquire dquot type 1
[   52.149841][ T3695] EXT4-fs (loop2): 1 truncate cleaned up
[   52.678770][ T3699] loop3: detected capacity change from 0 to 1024
[   52.729195][ T3699] EXT4-fs: Ignoring removed orlov option
[   52.840748][ T3699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.854662][ T3695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.177933][   T29] audit: type=1400 audit(1759324385.475:129): avc:  denied  { create } for  pid=3701 comm="syz.4.42" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   53.199419][   T29] audit: type=1400 audit(1759324385.475:130): avc:  denied  { map } for  pid=3701 comm="syz.4.42" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   53.223713][   T29] audit: type=1400 audit(1759324385.475:131): avc:  denied  { read write } for  pid=3701 comm="syz.4.42" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   53.366818][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.389184][ T3712] loop4: detected capacity change from 0 to 1024
[   53.400346][ T3713] netlink: 148 bytes leftover after parsing attributes in process `syz.0.44'.
[   53.410460][ T3712] EXT4-fs: Ignoring removed orlov option
[   53.451097][ T3712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.578793][   T29] audit: type=1400 audit(1759324385.485:132): avc:  denied  { append } for  pid=3701 comm="syz.4.42" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   53.579116][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.784928][ T3724] loop2: detected capacity change from 0 to 1024
[   53.792074][ T3724] EXT4-fs: Ignoring removed i_version option
[   53.800958][ T3724] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   53.905694][ T3724] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.47: Invalid block bitmap block 0 in block_group 0
[   53.920131][ T3724] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.47: Failed to acquire dquot type 0
[   53.932559][ T3724] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.47: Freeing blocks not in datazone - block = 0, count = 4096
[   53.947477][ T3724] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.47: Invalid inode bitmap blk 0 in block_group 0
[   53.961532][ T3724] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   53.970431][ T3686] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:58: Failed to release dquot type 0
[   53.986240][ T3724] EXT4-fs (loop2): 1 orphan inode deleted
[   53.993242][ T3724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.802264][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.817515][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.403315][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.430421][ T3729] loop4: detected capacity change from 0 to 1024
[   55.442845][ T3729] EXT4-fs: Ignoring removed orlov option
[   55.451063][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.589099][ T3734] loop2: detected capacity change from 0 to 512
[   55.650643][ T3737] loop1: detected capacity change from 0 to 512
[   55.671135][ T3737] EXT4-fs (loop1): orphan cleanup on readonly fs
[   55.678367][ T3737] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.48: Failed to acquire dquot type 1
[   55.694099][ T3737] EXT4-fs (loop1): 1 truncate cleaned up
[   55.754658][ T3734] ext4: Unknown parameter 'nouser_xattr'
[   55.955570][ T3734] loop2: detected capacity change from 0 to 1024
[   56.052798][ T3734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.273500][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.380636][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.535189][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.896052][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   56.896066][   T29] audit: type=1400 audit(1759324389.205:138): avc:  denied  { create } for  pid=3719 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   57.194482][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.264148][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.349362][ T3750] loop1: detected capacity change from 0 to 1024
[   57.356494][ T3750] EXT4-fs: Ignoring removed orlov option
[   57.366493][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.450775][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.609418][ T3761] loop1: detected capacity change from 0 to 1024
[   58.657808][ T3761] EXT4-fs: Ignoring removed i_version option
[   58.693025][ T3761] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   58.841927][   T29] audit: type=1326 audit(1759324391.145:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   58.865600][   T29] audit: type=1326 audit(1759324391.175:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   58.889268][   T29] audit: type=1326 audit(1759324391.175:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   58.913425][   T29] audit: type=1326 audit(1759324391.175:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   58.937257][   T29] audit: type=1326 audit(1759324391.175:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   58.960978][   T29] audit: type=1326 audit(1759324391.175:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   58.985175][   T29] audit: type=1326 audit(1759324391.175:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   59.108055][ T3761] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.54: Invalid block bitmap block 0 in block_group 0
[   59.131041][ T3768] loop0: detected capacity change from 0 to 512
[   59.148582][ T3770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.156488][ T3770] IPv6: NLM_F_CREATE should be set when creating new route
[   59.157373][ T3768] ext4: Unknown parameter 'nouser_xattr'
[   59.173324][   T29] audit: type=1326 audit(1759324391.215:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[   59.186747][ T3761] Quota error (device loop1): write_blk: dquota write failed
[   59.240846][ T3768] loop0: detected capacity change from 0 to 1024
[   59.345706][ T3761] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.54: Failed to acquire dquot type 0
[   59.379001][ T3761] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.54: Freeing blocks not in datazone - block = 0, count = 4096
[   59.401669][ T3761] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.54: Invalid inode bitmap blk 0 in block_group 0
[   59.415150][ T3644] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:21: Failed to release dquot type 0
[   59.415429][ T3761] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   59.714371][ T3768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.844327][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.855784][ T3768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.864732][ T3761] EXT4-fs (loop1): 1 orphan inode deleted
[   59.877430][ T3768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.886563][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.956998][ T3782] loop2: detected capacity change from 0 to 512
[   60.000128][ T3782] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   60.016721][ T3782] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.60: invalid indirect mapped block 2683928664 (level 1)
[   60.227987][ T3782] EXT4-fs (loop2): Remounting filesystem read-only
[   60.270698][ T3782] EXT4-fs (loop2): 1 truncate cleaned up
[   60.320859][ T3782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.401350][ T3782] EXT4-fs (loop2): shut down requested (2)
[   60.412811][ T3792] loop3: detected capacity change from 0 to 1024
[   60.434833][ T3782] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop2 ino=12
[   60.484797][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.497365][ T3792] EXT4-fs: Ignoring removed orlov option
[   60.503327][ T3792] EXT4-fs: Ignoring removed nobh option
[   60.509059][ T3792] EXT4-fs: Ignoring removed bh option
[   60.587326][ T3792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.605714][ T3800] loop2: detected capacity change from 0 to 1024
[   60.627578][ T3800] EXT4-fs: Ignoring removed orlov option
[   60.674499][ T3802] loop4: detected capacity change from 0 to 512
[   60.720700][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.748528][ T3800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.763340][ T3802] EXT4-fs (loop4): orphan cleanup on readonly fs
[   60.770359][ T3802] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.62: Failed to acquire dquot type 1
[   60.791148][ T3802] EXT4-fs (loop4): 1 truncate cleaned up
[   61.562740][ T3802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   61.878556][ T3808] loop3: detected capacity change from 0 to 1024
[   61.942432][ T3808] EXT4-fs: Ignoring removed orlov option
[   61.992957][ T3808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.247744][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.314194][ T3811] loop4: detected capacity change from 0 to 1024
[   62.321035][ T3811] EXT4-fs: Ignoring removed orlov option
[   62.333588][ T3811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.534145][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.564371][ T3817] loop2: detected capacity change from 0 to 1024
[   62.591011][ T3817] EXT4-fs: Ignoring removed orlov option
[   62.609390][ T3817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.724253][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.515507][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.558292][ T3827] netlink: 148 bytes leftover after parsing attributes in process `syz.2.69'.
[   63.667732][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.695179][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.697747][ T3831] loop3: detected capacity change from 0 to 1024
[   63.714397][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.727770][ T3831] EXT4-fs: Ignoring removed orlov option
[   63.737381][ T3831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.982402][   T29] kauditd_printk_skb: 32 callbacks suppressed
[   63.982420][   T29] audit: type=1326 audit(1759324396.285:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.0.76" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x0
[   64.023016][   T29] audit: type=1400 audit(1759324396.325:176): avc:  denied  { read } for  pid=3847 comm="syz.1.77" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   64.044166][   T29] audit: type=1400 audit(1759324396.325:177): avc:  denied  { open } for  pid=3847 comm="syz.1.77" path="net:[4026532493]" dev="nsfs" ino=4026532493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   64.107325][   T29] audit: type=1400 audit(1759324396.415:178): avc:  denied  { write } for  pid=3846 comm="syz.0.76" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   64.139875][   T29] audit: type=1400 audit(1759324396.445:179): avc:  denied  { mounton } for  pid=3855 comm="syz.2.78" path="/17/file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   64.771203][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.947229][   T29] audit: type=1326 audit(1759324397.255:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[   64.978794][ T3882] loop1: detected capacity change from 0 to 1024
[   64.985502][ T3882] EXT4-fs: Ignoring removed i_version option
[   65.001771][ T3876] loop0: detected capacity change from 0 to 128
[   65.022596][ T3881] loop3: detected capacity change from 0 to 128
[   65.115410][   T29] audit: type=1326 audit(1759324397.295:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[   65.139075][   T29] audit: type=1326 audit(1759324397.295:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[   65.162747][   T29] audit: type=1326 audit(1759324397.295:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[   65.185751][   T29] audit: type=1326 audit(1759324397.295:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[   65.473851][ T3882] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   65.489273][ T3881] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   65.497291][ T3881] FAT-fs (loop3): Filesystem has been set read-only
[   65.507834][ T3882] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.83: Invalid block bitmap block 0 in block_group 0
[   65.522008][ T3882] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.83: Failed to acquire dquot type 0
[   65.535119][ T3882] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.83: Freeing blocks not in datazone - block = 0, count = 4096
[   65.549265][ T3882] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.83: Invalid inode bitmap blk 0 in block_group 0
[   65.568142][ T3876] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   65.576109][ T3876] FAT-fs (loop0): Filesystem has been set read-only
[   65.583292][ T3882] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   65.595714][ T3882] EXT4-fs (loop1): 1 orphan inode deleted
[   65.639030][ T3876] syz.0.85: attempt to access beyond end of device
[   65.639030][ T3876] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   65.659615][ T3881] syz.3.88: attempt to access beyond end of device
[   65.659615][ T3881] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   65.877489][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0
[   65.922599][ T3876] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   65.930547][ T3876] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   65.939807][ T3890] syz.0.85: attempt to access beyond end of device
[   65.939807][ T3890] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[   65.944138][ T3881] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   65.953099][ T3890] Buffer I/O error on dev loop0, logical block 2065, async page read
[   65.961077][ T3881] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   65.969492][ T3890] syz.0.85: attempt to access beyond end of device
[   65.969492][ T3890] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[   65.990780][ T3890] Buffer I/O error on dev loop0, logical block 2066, async page read
[   66.003798][ T3890] syz.0.85: attempt to access beyond end of device
[   66.003798][ T3890] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128
[   66.017071][ T3890] Buffer I/O error on dev loop0, logical block 2067, async page read
[   66.033821][ T3890] syz.0.85: attempt to access beyond end of device
[   66.033821][ T3890] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128
[   66.047691][ T3890] Buffer I/O error on dev loop0, logical block 2068, async page read
[   66.064790][ T3881] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   66.084295][ T3881] syz.3.88: attempt to access beyond end of device
[   66.084295][ T3881] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   66.109884][ T3890] syz.0.85: attempt to access beyond end of device
[   66.109884][ T3890] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128
[   66.123816][ T3890] Buffer I/O error on dev loop0, logical block 2069, async page read
[   66.149405][ T3883] syz.3.88: attempt to access beyond end of device
[   66.149405][ T3883] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[   66.162648][ T3883] Buffer I/O error on dev loop3, logical block 2065, async page read
[   66.198713][ T3896] loop2: detected capacity change from 0 to 1024
[   66.209622][ T3890] syz.0.85: attempt to access beyond end of device
[   66.209622][ T3890] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128
[   66.223552][ T3890] Buffer I/O error on dev loop0, logical block 2070, async page read
[   66.248151][ T3896] EXT4-fs: Ignoring removed orlov option
[   66.272582][ T3896] EXT4-fs: Ignoring removed nobh option
[   66.278305][ T3896] EXT4-fs: Ignoring removed bh option
[   66.285547][ T3881] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   66.293484][ T3881] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   66.316840][ T3890] Buffer I/O error on dev loop0, logical block 2071, async page read
[   66.340177][ T3883] Buffer I/O error on dev loop3, logical block 2066, async page read
[   66.349680][ T3890] Buffer I/O error on dev loop0, logical block 2072, async page read
[   66.640672][ T3915] loop4: detected capacity change from 0 to 1024
[   66.685973][ T3922] loop0: detected capacity change from 0 to 512
[   66.699127][ T3920] loop3: detected capacity change from 0 to 1024
[   66.704257][ T3915] EXT4-fs: Ignoring removed orlov option
[   66.717533][ T3915] EXT4-fs: Ignoring removed nobh option
[   66.723273][ T3915] EXT4-fs: Ignoring removed bh option
[   66.751809][ T3922] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   66.761414][ T3922] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.97: invalid indirect mapped block 2683928664 (level 1)
[   66.771401][ T3920] EXT4-fs: Ignoring removed orlov option
[   66.794593][ T3922] EXT4-fs (loop0): Remounting filesystem read-only
[   66.826116][ T3922] EXT4-fs (loop0): 1 truncate cleaned up
[   66.888422][ T3922] EXT4-fs (loop0): shut down requested (2)
[   66.912653][ T3922] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   67.812275][ T3953] loop4: detected capacity change from 0 to 128
[   67.829272][ T3953] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   67.829299][ T3953] FAT-fs (loop4): Filesystem has been set read-only
[   67.829329][ T3953] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   67.829374][ T3953] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   67.901826][ T3961] loop2: detected capacity change from 0 to 1024
[   67.902340][ T3961] EXT4-fs: Ignoring removed i_version option
[   68.166638][ T3961] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   68.180231][ T3961] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.106: Invalid block bitmap block 0 in block_group 0
[   68.180492][ T3961] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.106: Failed to acquire dquot type 0
[   68.180862][ T3961] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.106: Freeing blocks not in datazone - block = 0, count = 4096
[   68.181107][ T3961] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.106: Invalid inode bitmap blk 0 in block_group 0
[   68.181272][ T3961] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   68.181527][ T3961] EXT4-fs (loop2): 1 orphan inode deleted
[   68.285439][ T3964] loop3: detected capacity change from 0 to 512
[   68.788577][ T3663] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:37: Failed to release dquot type 0
[   68.794716][ T3966] loop1: detected capacity change from 0 to 128
[   68.799770][ T3966] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   68.799801][ T3966] FAT-fs (loop1): Filesystem has been set read-only
[   68.799830][ T3966] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   68.799846][ T3966] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   69.352983][ T3972] 9pnet: Could not find request transport: fd0x0000000000000007
[   69.577295][   T29] kauditd_printk_skb: 23 callbacks suppressed
[   69.577313][   T29] audit: type=1400 audit(1759324401.885:202): avc:  denied  { create } for  pid=3980 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   69.618767][   T29] audit: type=1400 audit(1759324401.915:203): avc:  denied  { read write } for  pid=3980 comm="syz.2.111" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   69.642830][   T29] audit: type=1400 audit(1759324401.915:204): avc:  denied  { open } for  pid=3980 comm="syz.2.111" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   69.666653][   T29] audit: type=1400 audit(1759324401.915:205): avc:  denied  { ioctl } for  pid=3980 comm="syz.2.111" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   69.704964][ T3984] loop3: detected capacity change from 0 to 1024
[   69.712219][ T3984] EXT4-fs: Ignoring removed i_version option
[   69.737656][ T3985] loop1: detected capacity change from 0 to 128
[   69.752319][ T3985] vfat: Bad value for 'uid'
[   69.757086][ T3985] vfat: Bad value for 'uid'
[   69.795834][ T3984] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.830144][ T3988] loop4: detected capacity change from 0 to 1024
[   69.905209][ T3984] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.112: Invalid block bitmap block 0 in block_group 0
[   69.944049][ T3984] Quota error (device loop3): write_blk: dquota write failed
[   69.951635][ T3984] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   69.961845][ T3984] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.112: Failed to acquire dquot type 0
[   69.993525][ T3984] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.112: Freeing blocks not in datazone - block = 0, count = 4096
[   70.007524][ T3984] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.112: Invalid inode bitmap blk 0 in block_group 0
[   70.020937][ T3984] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   70.029668][ T3663] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8
[   70.038866][ T3663] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:37: Failed to release dquot type 0
[   70.076247][ T3984] EXT4-fs (loop3): 1 orphan inode deleted
[   70.083529][ T3984] EXT4-fs mount: 12 callbacks suppressed
[   70.083543][ T3984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.117296][ T3992] loop2: detected capacity change from 0 to 1024
[   70.153538][ T3988] EXT4-fs: Ignoring removed orlov option
[   70.231230][ T3992] EXT4-fs: Ignoring removed orlov option
[   70.320825][ T3992] EXT4-fs: Ignoring removed nobh option
[   70.326489][ T3992] EXT4-fs: Ignoring removed bh option
[   70.389252][   T29] audit: type=1326 audit(1759324402.595:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.0.117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x0
[   70.574001][ T3988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.589128][ T3998] loop1: detected capacity change from 0 to 1024
[   70.605769][ T3998] EXT4-fs: Ignoring removed orlov option
[   70.636561][ T3992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.668066][ T3998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.042647][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.104406][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.354159][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.408548][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.424569][ T4018] loop3: detected capacity change from 0 to 128
[   71.433093][   T29] audit: type=1326 audit(1759324403.735:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   71.456714][   T29] audit: type=1326 audit(1759324403.735:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   71.502878][ T4018] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   71.510810][ T4018] FAT-fs (loop3): Filesystem has been set read-only
[   71.521863][ T4018] bio_check_eod: 16513 callbacks suppressed
[   71.521879][ T4018] syz.3.123: attempt to access beyond end of device
[   71.521879][ T4018] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   71.585271][ T4024] loop1: detected capacity change from 0 to 1024
[   71.592333][ T4024] EXT4-fs: Ignoring removed orlov option
[   71.615384][ T4024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.677739][ T4018] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   71.685647][ T4018] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   71.727339][ T4025] syz.3.123: attempt to access beyond end of device
[   71.727339][ T4025] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[   71.740671][ T4025] buffer_io_error: 5654 callbacks suppressed
[   71.740709][ T4025] Buffer I/O error on dev loop3, logical block 2065, async page read
[   71.851039][ T4025] syz.3.123: attempt to access beyond end of device
[   71.851039][ T4025] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128
[   71.864713][ T4025] Buffer I/O error on dev loop3, logical block 2066, async page read
[   71.906179][ T4025] syz.3.123: attempt to access beyond end of device
[   71.906179][ T4025] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128
[   71.919585][ T4025] Buffer I/O error on dev loop3, logical block 2067, async page read
[   71.936032][ T4025] syz.3.123: attempt to access beyond end of device
[   71.936032][ T4025] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128
[   71.949501][ T4025] Buffer I/O error on dev loop3, logical block 2068, async page read
[   71.960424][ T4025] syz.3.123: attempt to access beyond end of device
[   71.960424][ T4025] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128
[   71.973952][ T4025] Buffer I/O error on dev loop3, logical block 2069, async page read
[   71.982685][ T4025] syz.3.123: attempt to access beyond end of device
[   71.982685][ T4025] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128
[   71.996123][ T4025] Buffer I/O error on dev loop3, logical block 2070, async page read
[   72.004701][ T4025] syz.3.123: attempt to access beyond end of device
[   72.004701][ T4025] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128
[   72.018185][ T4025] Buffer I/O error on dev loop3, logical block 2071, async page read
[   72.028872][ T4025] syz.3.123: attempt to access beyond end of device
[   72.028872][ T4025] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128
[   72.042499][ T4025] Buffer I/O error on dev loop3, logical block 2072, async page read
[   72.053679][ T4018] syz.3.123: attempt to access beyond end of device
[   72.053679][ T4018] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[   72.066971][ T4018] Buffer I/O error on dev loop3, logical block 2065, async page read
[   72.137541][ T4018] Buffer I/O error on dev loop3, logical block 2066, async page read
[   72.552712][ T4039] loop3: detected capacity change from 0 to 512
[   72.564048][ T4039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.572659][ T4039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.405606][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.493008][ T4059] loop1: detected capacity change from 0 to 1024
[   75.516772][   T29] kauditd_printk_skb: 18 callbacks suppressed
[   75.516786][   T29] audit: type=1400 audit(1759324407.825:227): avc:  denied  { setopt } for  pid=4060 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   75.561866][ T4059] EXT4-fs: Ignoring removed orlov option
[   75.577953][ T4059] EXT4-fs: Ignoring removed nobh option
[   75.584003][ T4059] EXT4-fs: Ignoring removed bh option
[   75.619684][   T29] audit: type=1400 audit(1759324407.845:228): avc:  denied  { bind } for  pid=4060 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   75.639082][   T29] audit: type=1400 audit(1759324407.845:229): avc:  denied  { name_bind } for  pid=4060 comm="syz.4.135" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   75.648759][ T4064] loop4: detected capacity change from 0 to 512
[   75.661069][   T29] audit: type=1400 audit(1759324407.845:230): avc:  denied  { node_bind } for  pid=4060 comm="syz.4.135" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   75.667804][ T4064] ext4: Unknown parameter 'nouser_xattr'
[   75.689377][   T29] audit: type=1400 audit(1759324407.845:231): avc:  denied  { write } for  pid=4060 comm="syz.4.135" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   75.716923][   T29] audit: type=1400 audit(1759324407.855:232): avc:  denied  { connect } for  pid=4060 comm="syz.4.135" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   75.738451][   T29] audit: type=1400 audit(1759324407.855:233): avc:  denied  { name_connect } for  pid=4060 comm="syz.4.135" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   75.774781][ T4064] loop4: detected capacity change from 0 to 1024
[   75.824390][ T4066] loop2: detected capacity change from 0 to 128
[   75.837910][ T4059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.864578][ T4066] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   75.872545][ T4066] FAT-fs (loop2): Filesystem has been set read-only
[   75.896608][ T4066] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   75.904648][ T4066] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   75.952243][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.079662][ T4064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.098361][ T4064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.533870][ T4066] bio_check_eod: 13447 callbacks suppressed
[   76.533891][ T4066] syz.2.137: attempt to access beyond end of device
[   76.533891][ T4066] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[   76.581236][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.629673][   T29] audit: type=1400 audit(1759324408.935:234): avc:  denied  { mount } for  pid=4080 comm="syz.1.139" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   76.779610][   T29] audit: type=1400 audit(1759324408.935:235): avc:  denied  { read append } for  pid=4080 comm="syz.1.139" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   76.801126][   T29] audit: type=1400 audit(1759324408.935:236): avc:  denied  { open } for  pid=4080 comm="syz.1.139" path="/26/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   77.677290][ T4097] hub 2-0:1.0: USB hub found
[   77.683109][ T4097] hub 2-0:1.0: 8 ports detected
[   78.178619][ T4105] loop2: detected capacity change from 0 to 1024
[   78.203342][ T4105] EXT4-fs: Ignoring removed orlov option
[   78.232612][ T4105] EXT4-fs: Ignoring removed nobh option
[   78.238461][ T4105] EXT4-fs: Ignoring removed bh option
[   78.297148][ T4105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.985943][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.057275][ T4118] loop3: detected capacity change from 0 to 128
[   79.070822][ T4118] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   79.078819][ T4118] FAT-fs (loop3): Filesystem has been set read-only
[   79.091920][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.116282][ T4118] syz.3.150: attempt to access beyond end of device
[   79.116282][ T4118] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   79.150423][ T4118] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   79.158595][ T4118] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   79.177852][ T4120] syz.3.150: attempt to access beyond end of device
[   79.177852][ T4120] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[   79.191413][ T4120] buffer_io_error: 10534 callbacks suppressed
[   79.191433][ T4120] Buffer I/O error on dev loop3, logical block 2065, async page read
[   79.207467][ T4120] syz.3.150: attempt to access beyond end of device
[   79.207467][ T4120] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128
[   79.220854][ T4120] Buffer I/O error on dev loop3, logical block 2066, async page read
[   79.262581][ T4120] syz.3.150: attempt to access beyond end of device
[   79.262581][ T4120] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128
[   79.276050][ T4120] Buffer I/O error on dev loop3, logical block 2067, async page read
[   79.312712][ T4120] syz.3.150: attempt to access beyond end of device
[   79.312712][ T4120] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128
[   79.326346][ T4120] Buffer I/O error on dev loop3, logical block 2068, async page read
[   79.348023][ T4120] syz.3.150: attempt to access beyond end of device
[   79.348023][ T4120] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128
[   79.361271][ T4120] Buffer I/O error on dev loop3, logical block 2069, async page read
[   79.371855][ T4120] syz.3.150: attempt to access beyond end of device
[   79.371855][ T4120] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128
[   79.385240][ T4120] Buffer I/O error on dev loop3, logical block 2070, async page read
[   79.397514][ T4120] syz.3.150: attempt to access beyond end of device
[   79.397514][ T4120] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128
[   79.410842][ T4120] Buffer I/O error on dev loop3, logical block 2071, async page read
[   79.527303][ T4120] syz.3.150: attempt to access beyond end of device
[   79.527303][ T4120] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128
[   79.540840][ T4120] Buffer I/O error on dev loop3, logical block 2072, async page read
[   79.549347][ T4120] Buffer I/O error on dev loop3, logical block 2065, async page read
[   79.557685][ T4120] Buffer I/O error on dev loop3, logical block 2066, async page read
[   80.061754][ T4136] loop4: detected capacity change from 0 to 1024
[   80.074223][ T4136] EXT4-fs: Ignoring removed orlov option
[   80.129343][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.277155][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   81.277172][   T29] audit: type=1326 audit(1759324413.585:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   81.316976][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.343779][   T29] audit: type=1326 audit(1759324413.585:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   81.397428][ T4154] loop4: detected capacity change from 0 to 512
[   81.426565][ T4154] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   81.452408][ T4154] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.159: invalid indirect mapped block 2683928664 (level 1)
[   81.524073][ T4154] EXT4-fs (loop4): Remounting filesystem read-only
[   81.545140][ T4154] EXT4-fs (loop4): 1 truncate cleaned up
[   81.567712][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.617438][ T4154] EXT4-fs (loop4): shut down requested (2)
[   81.635672][ T4154] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   81.638954][ T4159] loop0: detected capacity change from 0 to 1024
[   81.678390][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.688482][ T4159] EXT4-fs: Ignoring removed orlov option
[   81.725385][ T4159] EXT4-fs: Ignoring removed nobh option
[   81.731165][ T4159] EXT4-fs: Ignoring removed bh option
[   81.751718][ T4162] loop4: detected capacity change from 0 to 512
[   81.772714][ T4159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.806723][ T4162] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   81.857269][ T4162] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.162: invalid indirect mapped block 2683928664 (level 1)
[   81.986926][ T4162] EXT4-fs (loop4): Remounting filesystem read-only
[   81.993850][ T4162] EXT4-fs (loop4): 1 truncate cleaned up
[   81.999944][ T4162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.116103][ T4162] EXT4-fs (loop4): shut down requested (2)
[   82.123709][ T4162] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   82.189458][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.425257][   T29] audit: type=1326 audit(1759324414.725:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.448984][   T29] audit: type=1326 audit(1759324414.725:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.472683][   T29] audit: type=1326 audit(1759324414.725:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.496224][   T29] audit: type=1326 audit(1759324414.725:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.520769][   T29] audit: type=1326 audit(1759324414.725:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.544715][   T29] audit: type=1326 audit(1759324414.725:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.568249][   T29] audit: type=1326 audit(1759324414.725:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.592343][   T29] audit: type=1326 audit(1759324414.725:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.4.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[   82.656049][ T4176] loop3: detected capacity change from 0 to 128
[   82.680008][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.693034][ T4176] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   82.701126][ T4176] FAT-fs (loop3): Filesystem has been set read-only
[   82.740393][ T4176] bio_check_eod: 1633 callbacks suppressed
[   82.740408][ T4176] syz.3.165: attempt to access beyond end of device
[   82.740408][ T4176] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   82.765137][ T4176] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   82.773171][ T4176] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   82.782646][ T4181] syz.3.165: attempt to access beyond end of device
[   82.782646][ T4181] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[   82.796418][ T4181] syz.3.165: attempt to access beyond end of device
[   82.796418][ T4181] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128
[   82.815271][ T4181] syz.3.165: attempt to access beyond end of device
[   82.815271][ T4181] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128
[   82.829377][ T4181] syz.3.165: attempt to access beyond end of device
[   82.829377][ T4181] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128
[   82.848560][ T4181] syz.3.165: attempt to access beyond end of device
[   82.848560][ T4181] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128
[   82.862062][ T4181] syz.3.165: attempt to access beyond end of device
[   82.862062][ T4181] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128
[   82.896983][ T4181] syz.3.165: attempt to access beyond end of device
[   82.896983][ T4181] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128
[   82.958479][ T4181] syz.3.165: attempt to access beyond end of device
[   82.958479][ T4181] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128
[   82.995454][ T4176] syz.3.165: attempt to access beyond end of device
[   82.995454][ T4176] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[   83.305095][ T4196] loop4: detected capacity change from 0 to 1024
[   83.312313][ T4196] EXT4-fs: Ignoring removed i_version option
[   83.331632][ T4196] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.401791][ T4198] loop1: detected capacity change from 0 to 128
[   83.484014][ T4196] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.172: Invalid block bitmap block 0 in block_group 0
[   83.499630][ T4196] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.172: Failed to acquire dquot type 0
[   83.514897][ T4196] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.172: Freeing blocks not in datazone - block = 0, count = 4096
[   83.529252][ T4196] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.172: Invalid inode bitmap blk 0 in block_group 0
[   83.542896][ T3685] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:57: Failed to release dquot type 0
[   83.554485][ T4196] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   83.564151][ T4196] EXT4-fs (loop4): 1 orphan inode deleted
[   83.570603][ T4196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.682435][ T4198] vfat: Bad value for 'uid'
[   83.687207][ T4198] vfat: Bad value for 'uid'
[   84.581977][ T4212] loop1: detected capacity change from 0 to 512
[   84.873388][ T4214] loop0: detected capacity change from 0 to 1024
[   84.895739][ T4214] EXT4-fs: Ignoring removed orlov option
[   84.920135][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.013074][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.080873][ T4223] 9pnet_fd: Insufficient options for proto=fd
[   85.180126][ T4227] loop4: detected capacity change from 0 to 1024
[   85.187111][ T4227] EXT4-fs: Ignoring removed orlov option
[   85.199472][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.905793][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.123613][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.336242][ T4258] loop1: detected capacity change from 0 to 128
[   86.427259][ T4258] vfat: Bad value for 'uid'
[   86.432099][ T4258] vfat: Bad value for 'uid'
[   86.568032][ T4263] loop1: detected capacity change from 0 to 1024
[   86.579065][ T4263] EXT4-fs: Ignoring removed orlov option
[   86.594720][ T4263] EXT4-fs: Ignoring removed nobh option
[   86.600353][ T4263] EXT4-fs: Ignoring removed bh option
[   86.742094][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.917323][ T4271] loop3: detected capacity change from 0 to 128
[   86.966871][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.108258][ T4276] loop1: detected capacity change from 0 to 1024
[   87.115261][ T4276] EXT4-fs: Ignoring removed i_version option
[   87.129356][ T4276] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   87.198264][ T4276] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.193: Invalid block bitmap block 0 in block_group 0
[   87.284911][ T4276] __quota_error: 19 callbacks suppressed
[   87.284925][ T4276] Quota error (device loop1): write_blk: dquota write failed
[   87.298076][ T4276] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   87.309033][ T4276] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.193: Failed to acquire dquot type 0
[   87.330297][ T4276] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.193: Freeing blocks not in datazone - block = 0, count = 4096
[   87.345933][ T4276] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.193: Invalid inode bitmap blk 0 in block_group 0
[   87.359763][ T3665] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[   87.369236][ T3665] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:39: Failed to release dquot type 0
[   87.385113][ T4276] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   87.394111][ T4276] EXT4-fs (loop1): 1 orphan inode deleted
[   87.401018][ T4276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.555588][ T4278] loop3: detected capacity change from 0 to 128
[   87.639832][ T4278] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   87.647804][ T4278] FAT-fs (loop3): Filesystem has been set read-only
[   87.776150][ T4278] bio_check_eod: 5998 callbacks suppressed
[   87.776172][ T4278] syz.3.194: attempt to access beyond end of device
[   87.776172][ T4278] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   88.054938][ T4278] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   88.062814][ T4278] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   88.134618][ T4278] syz.3.194: attempt to access beyond end of device
[   88.134618][ T4278] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.185436][ T4275] syz.3.194: attempt to access beyond end of device
[   88.185436][ T4275] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.247456][ T4278] syz.3.194: attempt to access beyond end of device
[   88.247456][ T4278] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.307961][   T29] audit: type=1400 audit(1759324420.615:296): avc:  denied  { create } for  pid=4285 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   88.328172][   T29] audit: type=1400 audit(1759324420.615:297): avc:  denied  { create } for  pid=4285 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   88.354848][ T4286] netlink: 'syz.0.196': attribute type 12 has an invalid length.
[   88.373450][ T4275] syz.3.194: attempt to access beyond end of device
[   88.373450][ T4275] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.421504][ T4278] syz.3.194: attempt to access beyond end of device
[   88.421504][ T4278] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.462601][ T4288] loop0: detected capacity change from 0 to 1024
[   88.469594][ T4288] EXT4-fs: Ignoring removed orlov option
[   88.482570][ T4275] syz.3.194: attempt to access beyond end of device
[   88.482570][ T4275] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.498957][ T4288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.608737][ T4278] syz.3.194: attempt to access beyond end of device
[   88.608737][ T4278] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.666365][ T4278] syz.3.194: attempt to access beyond end of device
[   88.666365][ T4278] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   88.802913][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.922389][ T4295] loop4: detected capacity change from 0 to 128
[   88.980726][ T4297] loop1: detected capacity change from 0 to 128
[   88.983423][ T4295] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   88.995324][ T4295] FAT-fs (loop4): Filesystem has been set read-only
[   89.006959][ T4295] syz.4.200: attempt to access beyond end of device
[   89.006959][ T4295] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   89.021380][ T4295] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   89.030020][ T4295] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   89.058829][ T4301] buffer_io_error: 1014 callbacks suppressed
[   89.058849][ T4301] Buffer I/O error on dev loop4, logical block 2065, async page read
[   89.073551][ T4301] Buffer I/O error on dev loop4, logical block 2066, async page read
[   89.096490][ T4301] Buffer I/O error on dev loop4, logical block 2067, async page read
[   89.104814][ T4301] Buffer I/O error on dev loop4, logical block 2068, async page read
[   89.114323][ T4301] Buffer I/O error on dev loop4, logical block 2069, async page read
[   89.122574][ T4301] Buffer I/O error on dev loop4, logical block 2070, async page read
[   89.130832][ T4301] Buffer I/O error on dev loop4, logical block 2071, async page read
[   89.139432][ T4301] Buffer I/O error on dev loop4, logical block 2072, async page read
[   89.147820][ T4295] Buffer I/O error on dev loop4, logical block 2065, async page read
[   89.156248][ T4295] Buffer I/O error on dev loop4, logical block 2066, async page read
[   89.166124][ T4297] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   89.174041][ T4297] FAT-fs (loop1): Filesystem has been set read-only
[   89.189922][ T4297] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   89.198027][ T4297] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   89.526199][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.749856][ T4314] loop4: detected capacity change from 0 to 512
[   89.796467][ T4314] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   89.811591][ T4314] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.204: invalid indirect mapped block 2683928664 (level 1)
[   89.833370][ T4314] EXT4-fs (loop4): Remounting filesystem read-only
[   89.843924][ T4314] EXT4-fs (loop4): 1 truncate cleaned up
[   89.850521][ T4314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.866099][ T4314] EXT4-fs (loop4): shut down requested (2)
[   89.872493][ T4314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   89.892822][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.922429][ T4322] netlink: 'syz.4.207': attribute type 12 has an invalid length.
[   89.957408][ T4324] loop0: detected capacity change from 0 to 512
[   90.000073][ T4324] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   90.022928][ T4324] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.208: invalid indirect mapped block 2683928664 (level 1)
[   90.047964][ T4324] EXT4-fs (loop0): Remounting filesystem read-only
[   90.055022][ T4324] EXT4-fs (loop0): 1 truncate cleaned up
[   90.061089][ T4324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.135105][ T4333] netlink: 148 bytes leftover after parsing attributes in process `syz.1.212'.
[   90.159092][ T4324] EXT4-fs (loop0): shut down requested (2)
[   90.177143][ T4324] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   90.226482][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.296600][ T4340] loop0: detected capacity change from 0 to 1024
[   90.303612][ T4341] hub 2-0:1.0: USB hub found
[   90.313595][ T4340] EXT4-fs: Ignoring removed orlov option
[   90.346096][ T4340] EXT4-fs: Ignoring removed nobh option
[   90.351797][ T4340] EXT4-fs: Ignoring removed bh option
[   90.361395][ T4341] hub 2-0:1.0: 8 ports detected
[   90.403074][ T4340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.218386][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.937664][ T4358] loop1: detected capacity change from 0 to 512
[   91.946798][ T4358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.955721][ T4358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.368486][ T4365] netlink: 'syz.3.220': attribute type 12 has an invalid length.
[   93.408184][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'.
[   93.483028][ T4375] netlink: 148 bytes leftover after parsing attributes in process `syz.3.224'.
[   94.828572][ T4383] loop3: detected capacity change from 0 to 1024
[   94.835445][ T4383] EXT4-fs: Ignoring removed i_version option
[   94.915932][ T4383] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   94.930533][ T4383] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.226: Invalid block bitmap block 0 in block_group 0
[   94.954608][ T4383] Quota error (device loop3): write_blk: dquota write failed
[   94.962482][ T4383] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   94.972731][ T4383] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.226: Failed to acquire dquot type 0
[   94.985597][ T4383] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.226: Freeing blocks not in datazone - block = 0, count = 4096
[   94.999619][ T4383] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.226: Invalid inode bitmap blk 0 in block_group 0
[   95.024950][ T4383] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   95.033998][ T4383] EXT4-fs (loop3): 1 orphan inode deleted
[   95.040528][ T4383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.623798][ T3668] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8
[   95.633026][ T3668] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:42: Failed to release dquot type 0
[   96.253132][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.432572][   T29] audit: type=1326 audit(1759324428.735:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   96.456105][   T29] audit: type=1326 audit(1759324428.735:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   96.479436][   T29] audit: type=1326 audit(1759324428.735:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   96.502737][   T29] audit: type=1326 audit(1759324428.735:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   96.525837][   T29] audit: type=1326 audit(1759324428.735:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   96.549268][   T29] audit: type=1326 audit(1759324428.735:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   97.152621][   T29] audit: type=1326 audit(1759324429.455:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[   97.600319][ T4426] loop1: detected capacity change from 0 to 512
[   97.731913][ T4426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   97.745309][ T4426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   98.104781][ T4426] EXT4-fs (loop1): 1 truncate cleaned up
[   98.112347][ T4426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.918797][ T4451] loop2: detected capacity change from 0 to 1024
[   98.936869][ T4451] EXT4-fs: Ignoring removed orlov option
[   98.955065][ T4451] EXT4-fs: Ignoring removed nobh option
[   98.960847][ T4451] EXT4-fs: Ignoring removed bh option
[   99.187003][ T4451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.722488][ T4460] loop4: detected capacity change from 0 to 1024
[   99.729457][ T4460] EXT4-fs: Ignoring removed i_version option
[   99.778428][ T4460] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   99.816619][ T4460] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.247: Invalid block bitmap block 0 in block_group 0
[   99.830717][ T4460] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.247: Failed to acquire dquot type 0
[   99.842664][ T4460] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.247: Freeing blocks not in datazone - block = 0, count = 4096
[   99.856694][ T4460] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.247: Invalid inode bitmap blk 0 in block_group 0
[   99.869772][ T4460] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   99.878696][ T4460] EXT4-fs (loop4): 1 orphan inode deleted
[   99.885156][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.609581][ T3706] __quota_error: 28 callbacks suppressed
[  100.609600][ T3706] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[  100.625055][ T3706] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:65: Failed to release dquot type 0
[  100.777293][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.874334][   T29] audit: type=1326 audit(1759324433.185:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  100.898510][   T29] audit: type=1326 audit(1759324433.185:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  101.045094][   T29] audit: type=1326 audit(1759324433.235:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  101.069218][   T29] audit: type=1326 audit(1759324433.235:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  101.092863][   T29] audit: type=1326 audit(1759324433.235:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  101.429574][ T4479] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  101.443218][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.485010][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'.
[  101.512736][ T4481] netlink: 48 bytes leftover after parsing attributes in process `syz.4.256'.
[  101.620539][ T4485] loop2: detected capacity change from 0 to 1024
[  101.634312][ T4485] EXT4-fs: Ignoring removed orlov option
[  101.704576][ T4485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.487019][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.785379][   T29] audit: type=1400 audit(1759324435.095:336): avc:  denied  { read write } for  pid=4507 comm="syz.2.264" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  102.809687][   T29] audit: type=1400 audit(1759324435.095:337): avc:  denied  { open } for  pid=4507 comm="syz.2.264" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  102.858695][   T29] audit: type=1326 audit(1759324435.155:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d0f985d67 code=0x7ffc0000
[  102.882381][   T29] audit: type=1326 audit(1759324435.155:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d0f92af79 code=0x7ffc0000
[  102.882575][ T4511] loop4: detected capacity change from 0 to 1024
[  102.939901][ T4511] EXT4-fs: Ignoring removed orlov option
[  102.985857][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'.
[  102.987383][ T4511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.578936][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.896150][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.092518][ T4544] loop1: detected capacity change from 0 to 512
[  104.102080][ T4544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.110877][ T4544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.346088][ T4557] loop2: detected capacity change from 0 to 128
[  105.436617][ T4556] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  105.444625][ T4556] FAT-fs (loop2): Filesystem has been set read-only
[  105.527218][ T4556] bio_check_eod: 35715 callbacks suppressed
[  105.527239][ T4556] syz.2.281: attempt to access beyond end of device
[  105.527239][ T4556] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  105.569704][ T4561] loop0: detected capacity change from 0 to 1024
[  105.596503][ T4556] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  105.604513][ T4556] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  105.605658][ T4561] EXT4-fs: Ignoring removed orlov option
[  105.676523][ T4561] EXT4-fs: Ignoring removed nobh option
[  105.682147][ T4561] EXT4-fs: Ignoring removed bh option
[  105.685827][ T4557] syz.2.281: attempt to access beyond end of device
[  105.685827][ T4557] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128
[  105.700818][ T4557] buffer_io_error: 23166 callbacks suppressed
[  105.700834][ T4557] Buffer I/O error on dev loop2, logical block 2065, async page read
[  105.738750][ T4557] syz.2.281: attempt to access beyond end of device
[  105.738750][ T4557] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128
[  105.752939][ T4557] Buffer I/O error on dev loop2, logical block 2066, async page read
[  105.822337][ T4561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.883775][ T4557] syz.2.281: attempt to access beyond end of device
[  105.883775][ T4557] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128
[  105.897807][ T4557] Buffer I/O error on dev loop2, logical block 2067, async page read
[  106.033323][ T4557] syz.2.281: attempt to access beyond end of device
[  106.033323][ T4557] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128
[  106.047583][ T4557] Buffer I/O error on dev loop2, logical block 2068, async page read
[  106.307637][ T4557] syz.2.281: attempt to access beyond end of device
[  106.307637][ T4557] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128
[  106.321623][ T4557] Buffer I/O error on dev loop2, logical block 2069, async page read
[  106.519567][ T4557] syz.2.281: attempt to access beyond end of device
[  106.519567][ T4557] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128
[  106.533752][ T4557] Buffer I/O error on dev loop2, logical block 2070, async page read
[  106.665816][ T4557] syz.2.281: attempt to access beyond end of device
[  106.665816][ T4557] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128
[  106.679780][ T4557] Buffer I/O error on dev loop2, logical block 2071, async page read
[  106.696076][ T4557] syz.2.281: attempt to access beyond end of device
[  106.696076][ T4557] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128
[  106.709428][ T4557] Buffer I/O error on dev loop2, logical block 2072, async page read
[  106.717691][ T4557] syz.2.281: attempt to access beyond end of device
[  106.717691][ T4557] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128
[  106.731230][ T4557] Buffer I/O error on dev loop2, logical block 2065, async page read
[  106.739489][ T4557] Buffer I/O error on dev loop2, logical block 2066, async page read
[  106.775034][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.057569][ T4575] loop0: detected capacity change from 0 to 512
[  107.073817][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  107.073832][   T29] audit: type=1326 audit(1759324439.365:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.103360][   T29] audit: type=1326 audit(1759324439.365:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.126784][   T29] audit: type=1326 audit(1759324439.365:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.150608][   T29] audit: type=1326 audit(1759324439.365:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.174402][   T29] audit: type=1326 audit(1759324439.365:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.197935][   T29] audit: type=1326 audit(1759324439.365:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6241d7d710 code=0x7ffc0000
[  107.221849][   T29] audit: type=1326 audit(1759324439.365:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.225074][ T4577] loop3: detected capacity change from 0 to 128
[  107.245371][   T29] audit: type=1326 audit(1759324439.365:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.245408][   T29] audit: type=1326 audit(1759324439.365:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.245437][   T29] audit: type=1326 audit(1759324439.365:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  107.289125][ T4577] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  107.331640][ T4577] FAT-fs (loop3): Filesystem has been set read-only
[  107.345907][ T4575] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  107.369294][ T4577] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  107.377367][ T4577] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  107.391197][ T4575] EXT4-fs (loop0): 1 truncate cleaned up
[  107.422045][ T4575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.150068][ T4632] loop4: detected capacity change from 0 to 1024
[  111.164417][ T4632] EXT4-fs: Ignoring removed orlov option
[  111.170222][ T4632] EXT4-fs: Ignoring removed nobh option
[  111.175859][ T4632] EXT4-fs: Ignoring removed bh option
[  111.216969][ T4632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.274795][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.358412][ T4639] loop2: detected capacity change from 0 to 1024
[  111.365593][ T4639] EXT4-fs: Ignoring removed i_version option
[  111.372506][ T4639] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  111.388017][ T4639] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.302: Invalid block bitmap block 0 in block_group 0
[  111.402220][ T4639] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.302: Failed to acquire dquot type 0
[  111.414139][ T4639] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.302: Freeing blocks not in datazone - block = 0, count = 4096
[  111.427956][ T4639] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.302: Invalid inode bitmap blk 0 in block_group 0
[  111.441310][ T4639] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  111.450513][ T4639] EXT4-fs (loop2): 1 orphan inode deleted
[  111.457092][ T4639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.846057][ T3660] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:34: Failed to release dquot type 0
[  112.682359][   T29] kauditd_printk_skb: 27 callbacks suppressed
[  112.682383][   T29] audit: type=1326 audit(1759324444.985:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  112.837652][ T4648] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[  112.863012][ T4650] loop4: detected capacity change from 0 to 512
[  112.875177][   T29] audit: type=1326 audit(1759324445.025:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  112.899024][   T29] audit: type=1326 audit(1759324445.025:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  112.922568][   T29] audit: type=1326 audit(1759324445.025:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38740fd710 code=0x7ffc0000
[  112.946017][   T29] audit: type=1326 audit(1759324445.025:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  112.969636][   T29] audit: type=1326 audit(1759324445.025:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  112.993206][   T29] audit: type=1326 audit(1759324445.025:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  113.016587][   T29] audit: type=1326 audit(1759324445.025:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  113.040248][   T29] audit: type=1326 audit(1759324445.045:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  113.063427][   T29] audit: type=1326 audit(1759324445.045:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  113.269413][ T4650] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  113.297168][ T4650] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.305: invalid indirect mapped block 2683928664 (level 1)
[  113.362346][ T4650] EXT4-fs (loop4): Remounting filesystem read-only
[  113.392432][ T4650] EXT4-fs (loop4): 1 truncate cleaned up
[  113.418877][ T4650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.646570][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.715877][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.734818][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.799310][ T4671] 9pnet_fd: Insufficient options for proto=fd
[  114.050427][ T4682] loop2: detected capacity change from 0 to 1024
[  114.058873][ T4682] EXT4-fs: Ignoring removed orlov option
[  114.068895][ T4682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.091167][ T4680] loop0: detected capacity change from 0 to 128
[  114.155364][ T4680] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  114.163366][ T4680] FAT-fs (loop0): Filesystem has been set read-only
[  114.264011][ T4680] bio_check_eod: 16175 callbacks suppressed
[  114.264043][ T4680] syz.0.317: attempt to access beyond end of device
[  114.264043][ T4680] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  114.352499][ T4680] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  114.361070][ T4680] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  114.371386][ T4683] syz.0.317: attempt to access beyond end of device
[  114.371386][ T4683] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[  114.385064][ T4683] buffer_io_error: 5438 callbacks suppressed
[  114.385083][ T4683] Buffer I/O error on dev loop0, logical block 2065, async page read
[  114.463626][ T4683] syz.0.317: attempt to access beyond end of device
[  114.463626][ T4683] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[  114.477352][ T4683] Buffer I/O error on dev loop0, logical block 2066, async page read
[  114.492987][ T4683] syz.0.317: attempt to access beyond end of device
[  114.492987][ T4683] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128
[  114.506661][ T4683] Buffer I/O error on dev loop0, logical block 2067, async page read
[  114.519670][ T4683] syz.0.317: attempt to access beyond end of device
[  114.519670][ T4683] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128
[  114.534243][ T4683] Buffer I/O error on dev loop0, logical block 2068, async page read
[  114.543763][ T4683] syz.0.317: attempt to access beyond end of device
[  114.543763][ T4683] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128
[  114.557356][ T4683] Buffer I/O error on dev loop0, logical block 2069, async page read
[  114.568000][ T4683] syz.0.317: attempt to access beyond end of device
[  114.568000][ T4683] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128
[  114.581608][ T4683] Buffer I/O error on dev loop0, logical block 2070, async page read
[  114.635359][ T4683] syz.0.317: attempt to access beyond end of device
[  114.635359][ T4683] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128
[  114.649013][ T4683] Buffer I/O error on dev loop0, logical block 2071, async page read
[  114.678363][ T4683] syz.0.317: attempt to access beyond end of device
[  114.678363][ T4683] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128
[  114.692277][ T4683] Buffer I/O error on dev loop0, logical block 2072, async page read
[  114.701787][ T4683] syz.0.317: attempt to access beyond end of device
[  114.701787][ T4683] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[  114.715552][ T4683] Buffer I/O error on dev loop0, logical block 2065, async page read
[  114.716595][ T4700] loop1: detected capacity change from 0 to 128
[  114.748363][ T4683] Buffer I/O error on dev loop0, logical block 2066, async page read
[  114.788478][ T4698] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  114.796620][ T4698] FAT-fs (loop1): Filesystem has been set read-only
[  114.804570][ T4698] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  114.812513][ T4698] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  115.111306][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.317142][ T4721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=4721 comm=syz.2.330
[  115.629698][ T4728] loop3: detected capacity change from 0 to 1024
[  115.643136][ T4728] EXT4-fs: Ignoring removed orlov option
[  115.657242][ T4728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.872960][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.833875][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  117.833957][   T29] audit: type=1326 audit(1759324450.105:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d0f985d67 code=0x7ffc0000
[  117.864070][   T29] audit: type=1326 audit(1759324450.105:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d0f92af79 code=0x7ffc0000
[  117.888505][   T29] audit: type=1326 audit(1759324450.105:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d0f985d67 code=0x7ffc0000
[  117.912216][   T29] audit: type=1326 audit(1759324450.105:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d0f92af79 code=0x7ffc0000
[  117.935588][   T29] audit: type=1326 audit(1759324450.105:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  117.959498][   T29] audit: type=1326 audit(1759324450.105:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  117.983571][   T29] audit: type=1326 audit(1759324450.105:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  118.007629][   T29] audit: type=1326 audit(1759324450.105:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  118.031305][   T29] audit: type=1326 audit(1759324450.105:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d0f98d710 code=0x7ffc0000
[  118.054677][   T29] audit: type=1326 audit(1759324450.105:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  118.564283][ T4795] loop4: detected capacity change from 0 to 512
[  118.576272][ T4795] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  118.590614][ T4795] EXT4-fs (loop4): 1 truncate cleaned up
[  118.597705][ T4795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.503373][ T4805] loop0: detected capacity change from 0 to 1024
[  119.534131][ T4805] EXT4-fs: Ignoring removed orlov option
[  119.607711][ T4805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.894018][ T4814] loop1: detected capacity change from 0 to 128
[  119.941070][ T4814] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  119.949256][ T4814] FAT-fs (loop1): Filesystem has been set read-only
[  120.028211][ T4814] bio_check_eod: 15152 callbacks suppressed
[  120.028233][ T4814] syz.1.359: attempt to access beyond end of device
[  120.028233][ T4814] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  120.062392][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.075126][ T4814] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  120.083279][ T4814] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  120.095978][ T4814] syz.1.359: attempt to access beyond end of device
[  120.095978][ T4814] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  120.141792][ T4814] syz.1.359: attempt to access beyond end of device
[  120.141792][ T4814] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  120.165020][ T4814] syz.1.359: attempt to access beyond end of device
[  120.165020][ T4814] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  120.240990][ T4814] syz.1.359: attempt to access beyond end of device
[  120.240990][ T4814] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  120.286456][ T4817] syz.1.359: attempt to access beyond end of device
[  120.286456][ T4817] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128
[  120.300801][ T4817] buffer_io_error: 1742 callbacks suppressed
[  120.300821][ T4817] Buffer I/O error on dev loop1, logical block 2065, async page read
[  120.381253][ T4817] syz.1.359: attempt to access beyond end of device
[  120.381253][ T4817] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128
[  120.394879][ T4817] Buffer I/O error on dev loop1, logical block 2066, async page read
[  120.430533][ T4817] syz.1.359: attempt to access beyond end of device
[  120.430533][ T4817] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128
[  120.444133][ T4817] Buffer I/O error on dev loop1, logical block 2067, async page read
[  120.456220][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.474727][ T4817] syz.1.359: attempt to access beyond end of device
[  120.474727][ T4817] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128
[  120.488194][ T4817] Buffer I/O error on dev loop1, logical block 2068, async page read
[  120.532212][ T4817] syz.1.359: attempt to access beyond end of device
[  120.532212][ T4817] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128
[  120.545835][ T4817] Buffer I/O error on dev loop1, logical block 2069, async page read
[  120.571199][ T4817] Buffer I/O error on dev loop1, logical block 2070, async page read
[  120.579413][ T4817] Buffer I/O error on dev loop1, logical block 2071, async page read
[  120.588739][ T4817] Buffer I/O error on dev loop1, logical block 2072, async page read
[  120.596968][ T4817] Buffer I/O error on dev loop1, logical block 2065, async page read
[  120.656699][ T4817] Buffer I/O error on dev loop1, logical block 2066, async page read
[  121.550878][ T4859] loop2: detected capacity change from 0 to 1024
[  121.575526][ T4859] EXT4-fs: Ignoring removed orlov option
[  121.581631][ T4859] EXT4-fs: Ignoring removed nobh option
[  121.587531][ T4859] EXT4-fs: Ignoring removed bh option
[  121.631850][ T4859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.729764][ T4868] loop1: detected capacity change from 0 to 512
[  121.737514][ T4868] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  121.837274][ T4868] EXT4-fs (loop1): 1 truncate cleaned up
[  121.843454][ T4868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.844046][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.178864][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.439663][   T29] kauditd_printk_skb: 37 callbacks suppressed
[  123.439680][   T29] audit: type=1326 audit(1759324455.745:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="syz.2.387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x0
[  123.600617][ T4910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.739375][   T29] audit: type=1326 audit(1759324456.045:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7ff766835d67 code=0x0
[  123.789922][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'.
[  125.029371][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'.
[  125.096750][ T4931] loop0: detected capacity change from 0 to 512
[  125.109589][ T4931] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  125.136043][ T4931] EXT4-fs (loop0): 1 truncate cleaned up
[  125.142745][ T4931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.540895][   T29] audit: type=1326 audit(1759324457.845:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  125.665594][   T29] audit: type=1326 audit(1759324457.875:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  125.688416][   T29] audit: type=1326 audit(1759324457.875:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  125.711067][   T29] audit: type=1326 audit(1759324457.875:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  125.733997][   T29] audit: type=1326 audit(1759324457.875:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  125.757444][   T29] audit: type=1326 audit(1759324457.875:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  125.780469][   T29] audit: type=1326 audit(1759324457.875:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  125.804304][   T29] audit: type=1326 audit(1759324457.875:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  126.966682][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.134144][ T4970] loop3: detected capacity change from 0 to 512
[  128.009952][ T4970] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  128.035605][ T4970] EXT4-fs (loop3): 1 truncate cleaned up
[  128.042381][ T4970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.869920][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.549498][ T4996] loop1: detected capacity change from 0 to 512
[  129.558085][ T4996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.566757][ T4996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.474078][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  130.474097][   T29] audit: type=1326 audit(1759324462.785:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.452987][   T29] audit: type=1326 audit(1759324462.915:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.475798][   T29] audit: type=1326 audit(1759324462.925:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.498522][   T29] audit: type=1326 audit(1759324462.925:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.521367][   T29] audit: type=1326 audit(1759324462.925:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.543944][   T29] audit: type=1326 audit(1759324462.925:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.566802][   T29] audit: type=1326 audit(1759324462.925:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.576442][ T5010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.417'.
[  131.589420][   T29] audit: type=1326 audit(1759324462.925:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.589455][   T29] audit: type=1326 audit(1759324462.925:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  131.589512][   T29] audit: type=1326 audit(1759324463.685:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="L" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6241d7eec9 code=0x7ffc0000
[  132.699886][ T5028] loop2: detected capacity change from 0 to 512
[  132.759577][ T5028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  132.904073][ T5028] EXT4-fs (loop2): 1 truncate cleaned up
[  132.910713][ T5028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.367293][ T5033] loop1: detected capacity change from 0 to 1024
[  133.405142][ T5033] EXT4-fs: Ignoring removed orlov option
[  133.433474][ T5033] EXT4-fs: Ignoring removed nobh option
[  133.439119][ T5033] EXT4-fs: Ignoring removed bh option
[  133.506506][ T5033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.529564][ T5034] hub 2-0:1.0: USB hub found
[  133.568822][ T5034] hub 2-0:1.0: 8 ports detected
[  134.102630][ T5044] loop4: detected capacity change from 0 to 512
[  134.118492][ T5044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  134.134805][ T5044] EXT4-fs (loop4): 1 truncate cleaned up
[  134.141064][ T5044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.345771][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.799249][ T5049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'.
[  134.861312][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.942099][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[  135.659122][ T5064] loop2: detected capacity change from 0 to 512
[  135.669098][ T5064] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  135.683842][ T5064] EXT4-fs (loop2): 1 truncate cleaned up
[  135.690234][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.718126][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.886514][ T5079] loop0: detected capacity change from 0 to 512
[  136.971180][ T5079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  136.996814][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  136.996831][   T29] audit: type=1326 audit(1759324469.305:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.054725][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.083691][ T5079] EXT4-fs (loop0): 1 truncate cleaned up
[  137.090320][ T5079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.524258][   T29] audit: type=1326 audit(1759324469.335:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.547608][   T29] audit: type=1326 audit(1759324469.335:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.571168][   T29] audit: type=1326 audit(1759324469.335:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.594434][   T29] audit: type=1326 audit(1759324469.335:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.617969][   T29] audit: type=1326 audit(1759324469.335:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38740fd710 code=0x7ffc0000
[  137.641616][   T29] audit: type=1326 audit(1759324469.335:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.665324][   T29] audit: type=1326 audit(1759324469.335:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.688998][   T29] audit: type=1326 audit(1759324469.335:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.712486][   T29] audit: type=1326 audit(1759324469.335:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38740feec9 code=0x7ffc0000
[  137.778030][ T5091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'.
[  137.898612][ T5093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'.
[  138.333062][ T5099] loop4: detected capacity change from 0 to 512
[  138.449484][ T5099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  138.462724][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.495341][ T5099] EXT4-fs (loop4): 1 truncate cleaned up
[  138.501556][ T5099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.733181][ T5107] loop0: detected capacity change from 0 to 512
[  138.762869][ T5107] ext4: Unknown parameter 'nouser_xattr'
[  138.850059][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.893833][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.295800][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.331159][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.661733][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[  140.652419][ T5130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'.
[  141.418812][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.628347][ T5148] loop3: detected capacity change from 0 to 1024
[  141.640401][ T5148] EXT4-fs: Ignoring removed orlov option
[  141.715506][ T5151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.461'.
[  142.081435][ T5148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.201703][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  142.201735][   T29] audit: type=1326 audit(1759324474.505:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[  142.231829][   T29] audit: type=1326 audit(1759324474.505:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[  142.255453][   T29] audit: type=1326 audit(1759324474.505:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[  142.279199][   T29] audit: type=1326 audit(1759324474.505:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[  142.316991][   T29] audit: type=1326 audit(1759324474.615:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff76683d710 code=0x7ffc0000
[  142.340566][   T29] audit: type=1326 audit(1759324474.615:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[  142.364047][   T29] audit: type=1326 audit(1759324474.615:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76683eec9 code=0x7ffc0000
[  143.007192][ T5174] loop1: detected capacity change from 0 to 1024
[  143.043588][ T5176] loop4: detected capacity change from 0 to 1024
[  143.054488][ T5174] EXT4-fs: Ignoring removed orlov option
[  143.063392][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.211270][ T5174] EXT4-fs: Ignoring removed nobh option
[  143.217142][ T5174] EXT4-fs: Ignoring removed bh option
[  143.227566][ T5176] EXT4-fs: Ignoring removed orlov option
[  143.514324][ T5176] EXT4-fs: Ignoring removed nobh option
[  143.520011][ T5176] EXT4-fs: Ignoring removed bh option
[  143.553011][ T5176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.570525][ T5180] loop0: detected capacity change from 0 to 512
[  143.656858][ T5180] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  143.699741][ T5174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.713782][ T5180] EXT4-fs (loop0): 1 truncate cleaned up
[  143.720671][ T5180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.921315][   T29] audit: type=1326 audit(1759324476.205:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  143.944673][   T29] audit: type=1326 audit(1759324476.205:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  143.967784][   T29] audit: type=1326 audit(1759324476.205:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f3d0f98eec9 code=0x7ffc0000
[  144.474489][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.498178][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.603395][ T5196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.473'.
[  144.728667][ T5201] 9pnet_fd: Insufficient options for proto=fd
[  144.986824][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.782259][ T5221] loop4: detected capacity change from 0 to 128
[  145.819138][ T5221] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  145.827107][ T5221] FAT-fs (loop4): Filesystem has been set read-only
[  145.850515][ T5221] bio_check_eod: 7125 callbacks suppressed
[  145.850531][ T5221] syz.4.481: attempt to access beyond end of device
[  145.850531][ T5221] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  145.953784][ T5221] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  145.961721][ T5221] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  146.004849][ T5223] syz.4.481: attempt to access beyond end of device
[  146.004849][ T5223] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128
[  146.018384][ T5223] buffer_io_error: 4446 callbacks suppressed
[  146.018401][ T5223] Buffer I/O error on dev loop4, logical block 2065, async page read
[  146.050843][ T5228] loop3: detected capacity change from 0 to 1024
[  146.057671][ T5228] EXT4-fs: Ignoring removed orlov option
[  146.068951][ T5223] syz.4.481: attempt to access beyond end of device
[  146.068951][ T5223] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128
[  146.082215][ T5223] Buffer I/O error on dev loop4, logical block 2066, async page read
[  146.090874][ T5225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.107361][ T5223] syz.4.481: attempt to access beyond end of device
[  146.107361][ T5223] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128
[  146.120610][ T5223] Buffer I/O error on dev loop4, logical block 2067, async page read
[  146.134432][ T5228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.154915][ T5223] syz.4.481: attempt to access beyond end of device
[  146.154915][ T5223] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128
[  146.168311][ T5223] Buffer I/O error on dev loop4, logical block 2068, async page read
[  146.192506][ T5223] syz.4.481: attempt to access beyond end of device
[  146.192506][ T5223] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128
[  146.206024][ T5223] Buffer I/O error on dev loop4, logical block 2069, async page read
[  146.214612][ T5223] syz.4.481: attempt to access beyond end of device
[  146.214612][ T5223] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128
[  146.228000][ T5223] Buffer I/O error on dev loop4, logical block 2070, async page read
[  146.236849][ T5223] syz.4.481: attempt to access beyond end of device
[  146.236849][ T5223] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128
[  146.250284][ T5223] Buffer I/O error on dev loop4, logical block 2071, async page read
[  146.258938][ T5223] syz.4.481: attempt to access beyond end of device
[  146.258938][ T5223] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128
[  146.264068][ T5232] loop1: detected capacity change from 0 to 1024
[  146.272430][ T5223] Buffer I/O error on dev loop4, logical block 2072, async page read
[  146.287390][ T5221] syz.4.481: attempt to access beyond end of device
[  146.287390][ T5221] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128
[  146.297046][ T5232] EXT4-fs: Ignoring removed orlov option
[  146.300756][ T5221] Buffer I/O error on dev loop4, logical block 2065, async page read
[  146.308824][ T5232] EXT4-fs: Ignoring removed nobh option
[  146.320229][ T5232] EXT4-fs: Ignoring removed bh option
[  146.357238][ T5232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.394989][ T5221] Buffer I/O error on dev loop4, logical block 2066, async page read
[  146.746259][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'.
[  146.847749][ T5244] loop2: detected capacity change from 0 to 512
[  146.854850][ T5244] ext4: Unknown parameter 'nouser_xattr'
[  146.891423][ T5244] loop2: detected capacity change from 0 to 1024
[  146.919656][ T5228] ==================================================================
[  146.927819][ T5228] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark
[  146.935981][ T5228] 
[  146.938511][ T5228] write to 0xffff888119c83254 of 4 bytes by task 5233 on cpu 1:
[  146.946424][ T5228]  xas_set_mark+0x12b/0x140
[  146.951086][ T5228]  __folio_start_writeback+0x1dd/0x440
[  146.956668][ T5228]  ext4_bio_write_folio+0x5ad/0x9f0
[  146.961984][ T5228]  mpage_process_page_bufs+0x4a1/0x620
[  146.967599][ T5228]  mpage_prepare_extent_to_map+0x786/0xc00
[  146.973483][ T5228]  ext4_do_writepages+0xa05/0x2750
[  146.978633][ T5228]  ext4_writepages+0x176/0x300
[  146.983446][ T5228]  do_writepages+0x1c6/0x310
[  146.988127][ T5228]  file_write_and_wait_range+0x156/0x2c0
[  146.993801][ T5228]  generic_buffers_fsync_noflush+0x45/0x120
[  147.000183][ T5228]  ext4_sync_file+0x1ab/0x690
[  147.004897][ T5228]  vfs_fsync_range+0x10d/0x130
[  147.009734][ T5228]  ext4_buffered_write_iter+0x34f/0x3c0
[  147.015327][ T5228]  ext4_file_write_iter+0x383/0xf00
[  147.020550][ T5228]  iter_file_splice_write+0x663/0xa60
[  147.026471][ T5228]  direct_splice_actor+0x156/0x2a0
[  147.031694][ T5228]  splice_direct_to_actor+0x312/0x680
[  147.037123][ T5228]  do_splice_direct+0xda/0x150
[  147.042079][ T5228]  do_sendfile+0x380/0x650
[  147.046506][ T5228]  __x64_sys_sendfile64+0x105/0x150
[  147.051809][ T5228]  x64_sys_call+0x2bb4/0x3000
[  147.056500][ T5228]  do_syscall_64+0xd2/0x200
[  147.061478][ T5228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.067379][ T5228] 
[  147.069705][ T5228] read to 0xffff888119c83254 of 4 bytes by task 5228 on cpu 0:
[  147.077254][ T5228]  file_write_and_wait_range+0x10e/0x2c0
[  147.082991][ T5228]  generic_buffers_fsync_noflush+0x45/0x120
[  147.089084][ T5228]  ext4_sync_file+0x1ab/0x690
[  147.093786][ T5228]  vfs_fsync_range+0x10d/0x130
[  147.098577][ T5228]  ext4_buffered_write_iter+0x34f/0x3c0
[  147.104141][ T5228]  ext4_file_write_iter+0x383/0xf00
[  147.109356][ T5228]  iter_file_splice_write+0x663/0xa60
[  147.114769][ T5228]  direct_splice_actor+0x156/0x2a0
[  147.119986][ T5228]  splice_direct_to_actor+0x312/0x680
[  147.125395][ T5228]  do_splice_direct+0xda/0x150
[  147.130195][ T5228]  do_sendfile+0x380/0x650
[  147.134722][ T5228]  __x64_sys_sendfile64+0x105/0x150
[  147.139947][ T5228]  x64_sys_call+0x2bb4/0x3000
[  147.144645][ T5228]  do_syscall_64+0xd2/0x200
[  147.149182][ T5228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.155106][ T5228] 
[  147.157434][ T5228] value changed: 0x0a000021 -> 0x04000021
[  147.163681][ T5228] 
[  147.166034][ T5228] Reported by Kernel Concurrency Sanitizer on:
[  147.172205][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  147.181848][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  147.191928][ T5228] ==================================================================
[  147.230474][ T5244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.290902][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.291165][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.316131][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.364137][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.868724][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.