last executing test programs:

1m42.074756074s ago: executing program 2 (id=2042):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4080)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x2, 0x2}, {0xe, 0x5}, {0xf, 0x3}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x59, 0x1}, @enum={0x1, 0x4, 0x0, 0x6, 0x4, [{0x4}, {0x13, 0x80}, {0xa, 0x5}, {0xd, 0xcf}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x89d}, {0x9}, {0x8, 0x4}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000bc0)=""/4096, 0xac, 0x1000, 0x0, 0xe6e1, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x3, 0x55}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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")
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)

1m41.924482964s ago: executing program 2 (id=2047):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x5, 0xa, 0xe18)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10)
r6 = dup3(r3, r2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x3c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x33079690}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xb}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xb5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7fff}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x2}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x20e, 0x0, 0x8, 0x42420, r7, 0x10001, '\x00', r9, r6, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2000040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d1ffe27341b642d77303030303030346532322c70726976706f7274"])
clock_gettime(0x0, &(0x7f0000000240))

1m41.775095994s ago: executing program 2 (id=2053):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x50}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000160a03020000000000000000020000000900010073797a30000000000900020073797a32000000001800038008"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m41.744940023s ago: executing program 2 (id=2055):
syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000030000000000021b07800000000ffffffff0c0090787fc0000045ec00060064d78b0893c3"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10)
inotify_init1(0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x9)
getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=<r2=>0x0)
mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000980)={'trans=xen,', {[{@ignoreqv}, {@noextend}, {@fscache}, {@posixacl}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}, {@uid_gt={'uid>', r2}}]}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x180000)
write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48010)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x72, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0)

1m41.353059563s ago: executing program 2 (id=2058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4080)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'})
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x3, 0x55}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEuBOCP26eKi0EKZTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmO1Om293SX7tbup9PMnSeme48z5R++5199nlmAuhYI9k/acT+iLiaRAyV9nVHvnNk6fvu/3njXLYkUam8/UcSNz5JFsvHSvKvg/mL/xmK5Oc0Yl/X6nrnFq5fmpyZmb6Wl8fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn8ylWfvvX+h0OfnXn3268fJuPf/XomiZPxKP+G7LxqX9u3pZqzn9lIVJY8KG/Pfq4ntnjsneKvoeL35LGkdgM7Vpr/Pv4vIp6Noegq/W8OxadvtrVxQFNVkihyFNBxkk3Ff//2NwRoseI6oHhvX+998Gppk69KgFa4d2qpA2Ap9nsiooj/7qW+weiPbOvA/WRFP08SEVvrmVuS1fHTj2duZUs06IcDmmPxZtHLXZv/k2psDkd/tTRwP10R/2lpyba/tcn6R2rK4h9aZ/FmRDyX5//e2FD8j5Ti/71N1i/+AQAAAAAAYPvcORURr9Qb/5cuj//prTP+ZzAiTm5D/U/+/C+9m68k21AdUHLvVMTrdcf/Lo/xHe7KS/+tjgfoSc5fnJk+ks8ZPBQ9fVl5vOa45RHChz/f91Wj+svj/7Ilq78YC5gf6W53zUTcqcn5ya2eNxBx72bE89XxvwfyLSvH/2T5P6mT/7P4vrrOOva9dPtso31Pjn+gWSrfRBysm/8fX24na9+fY6x6PTBWXBWs9sLHX3zfqH7xD+2T5f+BteO/Lynfr2duY8fvjYijC92VRvs3e/3fm7zTVRw/89Hk/Py18Yje5PTq7RMbazPsVkU8FPGSxf+hF9fu/1u+/i/F4Z6IWFxnnc88Gvyt0T75H9oni/+ptfP/8Mr8v/GVidvDPzSq/+y68v+xak4/lG/R/wdlq+/Hsd4AbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOApl0bEfyJJR5fX03R0NGIwIv4fA+nM7Nz8y+dnP7gyle2rPv8/LZ70O7RUTorn/w+XyhM15aMRsTcivuzaUy2PnpudmWr3yQMAAAAAAAAAAAAAAAAAAMAOMVid81/pq53/n/m9q92tA5quO/8q3qHzdG/6lZW+bW0I0HKbj3/gabf++O9pajuA1msc/w8eVqpa2hyghVz/Q+faZPz7uAB2AfkfOtU6+/T6m90OoB3kfwAAAAAA2FX2HrjzSxIRi6/tqS6Z3nyfwf6wu6XtbgDQNsbwQufqnm13C4B28R4fSJbX/q472b/x6P+kOQ0CAAAAAAAAAAAAAFY5uN/8f+hUa8//N7YfdrM15v/XC363C4BdpPGjP+R+2O28xweelO3N/wcAAAAAAAAAAACAHaD/+qXJmZnpa3MLT9/KGzujGRtbWZzcEc3Y1pVHzTlyT0TsjBNs9UpxC442NqPNf5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl/wYAAP//SlcnIw==")
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)

1m41.013829942s ago: executing program 2 (id=2063):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='workqueue_queue_work\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000f3ff000007020000f8ffffffb70300000800407608f000000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
readv(0xffffffffffffffff, 0x0, 0x0)
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0)

1m40.992712942s ago: executing program 32 (id=2063):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='workqueue_queue_work\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000f3ff000007020000f8ffffffb70300000800407608f000000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
readv(0xffffffffffffffff, 0x0, 0x0)
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0)

2.940386639s ago: executing program 1 (id=3914):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4080)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x2, 0x2}, {0xe, 0x5}, {0xf, 0x3}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x59, 0x1}, @enum={0x1, 0x4, 0x0, 0x6, 0x4, [{0x4}, {0x13, 0x80}, {0xa, 0x5}, {0xd, 0xcf}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x89d}, {0x9}, {0x8, 0x4}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000bc0)=""/4096, 0xac, 0x1000, 0x0, 0xe6e1, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r4}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x3, 0x55}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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")
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)

2.496903337s ago: executing program 1 (id=3919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4080)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5, 0x2}, {0x2, 0x2}, {0xe, 0x5}, {0xf, 0x3}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x59, 0x1}, @enum={0x1, 0x4, 0x0, 0x6, 0x4, [{0x4}, {0x13, 0x80}, {0xa, 0x5}, {0xd, 0xcf}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x89d}, {0x9}, {0x8, 0x4}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000bc0)=""/4096, 0xac, 0x1000, 0x0, 0xe6e1, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r4}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x3, 0x55}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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")
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)

2.167414526s ago: executing program 1 (id=3927):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a300000000008000340000000"], 0x64}}, 0x0)

2.029379616s ago: executing program 1 (id=3931):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1003, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$isdn(0x22, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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")
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

1.714934855s ago: executing program 1 (id=3940):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='workqueue_queue_work\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
readv(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0)

1.374495474s ago: executing program 4 (id=3948):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x4}, 0x18)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu|00\t&&')
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x2a1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, r6}}, 0x30)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtaction={0x78, 0x30, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}}, 0x20000051)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x4aa)
r8 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r8, &(0x7f0000000040), 0x10)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18)
listen(r8, 0x0)
r11 = socket(0x28, 0x5, 0x0)
getsockopt$bt_hci(r8, 0x0, 0x2, &(0x7f00000004c0)=""/234, &(0x7f0000000240)=0xea)
connect$vsock_stream(r8, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)

1.238716334s ago: executing program 5 (id=3954):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)

1.178031574s ago: executing program 5 (id=3956):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffe1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3e, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7e06}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

1.160779423s ago: executing program 5 (id=3957):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000180)=0x205538, 0xfffffd24)

1.050001443s ago: executing program 5 (id=3962):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.046477473s ago: executing program 0 (id=3963):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffff62, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'syzkaller0\x00', @random="2b0100004ec6"})

983.850873ms ago: executing program 0 (id=3964):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x4}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) (fail_nth: 3)

949.722153ms ago: executing program 5 (id=3965):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x80000, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x8009)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000180)=0x205538, 0xfffffd24)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)

886.791603ms ago: executing program 0 (id=3966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c0012800900010062"], 0x44}}, 0x0)

884.320813ms ago: executing program 0 (id=3967):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='workqueue_queue_work\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000f3ff000007020000f8ffffffb70300000800407608f000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa46041, 0x0, 0x1, 0x0, &(0x7f0000000040))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0)

785.181182ms ago: executing program 1 (id=3968):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

648.003452ms ago: executing program 3 (id=3969):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0x3, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040054)

597.488582ms ago: executing program 5 (id=3970):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$inet(0x2, 0x2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0xa34, &(0x7f0000000b40)="$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")
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x15e8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028000000000006907800000000ffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='['], 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1, 0x0, 0x3}}], 0x48}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r9}, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

535.219242ms ago: executing program 3 (id=3971):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x100, 0x2, 0x0, 0xa}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x2}, {0x0, 0x41e8, 0x0, 0x2}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'cts(ecb-aes-neon)\x00'}}}]}, 0x138}}, 0x0)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10)
r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x665a, 0x0, 0x8003}, &(0x7f0000000440)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
io_uring_enter(r5, 0x6e2, 0x600, 0x1, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff})
read$msr(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x12, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000004d1e25f60800000018460000040000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc9, &(0x7f0000000140)=""/201, 0x41000, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x2, 0xd, 0x9}], 0x10, 0x5, @void, @value}, 0x94)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r10, 0x9, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='rpcgss_import_ctx\x00', r9, 0x0, 0x7f}, 0x18)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1be)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
socket(0x2, 0x80805, 0x0)

462.069002ms ago: executing program 4 (id=3972):
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f10d, 0xfffb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x0, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000020000000ee156600000800060002000000180001801400020076657468"], 0x34}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7)

384.624121ms ago: executing program 3 (id=3973):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20)

373.224301ms ago: executing program 4 (id=3974):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0xffffff62, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'syzkaller0\x00', @random="2b0100004ec6"})

366.788071ms ago: executing program 3 (id=3975):
r0 = socket(0x28, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
statx(r1, 0x0, 0x1000, 0x1, &(0x7f0000000100))
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000400)=0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0x0, 0x5, 0x10000000}], 0x1, 0x2, 0x0, 0x60})
connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7ff0, 0x4}, &(0x7f00000000c0)=0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)

330.826361ms ago: executing program 4 (id=3976):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
close_range(r4, 0xffffffffffffffff, 0x2)
recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, 0xffffffffffffffff, "246717e1db80a6f60c82a68d7cb18eceaf6d2be4f62e196f71f153ee47a665c9", 0x7, 0xffffffff, 0x7fff, 0x774f}, 0x3c)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000001f80)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0)

231.390931ms ago: executing program 3 (id=3977):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x8009)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000180)=0x205538, 0xfffffd24)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x2})

147.636181ms ago: executing program 4 (id=3978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

28.57417ms ago: executing program 0 (id=3979):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x0, 'client0\x00', 0xffffffff00000000, "00000000ffffffe3", "e4a18560d99f00000800", 0x80})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000c000000000000000000957719ec09c8ac9c0263c3fcbeb61d5fea7e03fe2cc2c64fb14fa4548ca2c57d4529742e8e5ad7199ed0d268d633194329cc17"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "0400000000000000"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50)

9.801031ms ago: executing program 4 (id=3980):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x80000, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x8009)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000180)=0x205538, 0xfffffd24)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)

599.58µs ago: executing program 0 (id=3981):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
r0 = gettid()
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_setup(0xf8, &(0x7f0000000400))
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
shutdown(r2, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = add_key(&(0x7f0000000840)='syzkaller\x00', &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r5, 0x2000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
sync()
sync()
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@usrquota}, {@grpjquota}, {@init_itable}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")

0s ago: executing program 3 (id=3982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 audit(1740904484.382:57602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13955 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  192.212755][   T29] audit: type=1326 audit(1740904484.382:57603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13955 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  192.236352][   T29] audit: type=1326 audit(1740904484.382:57604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13955 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  192.245220][T13968] __nla_validate_parse: 2 callbacks suppressed
[  192.245242][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3346'.
[  192.262635][   T29] audit: type=1326 audit(1740904484.412:57605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  192.300216][   T29] audit: type=1326 audit(1740904484.412:57606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  192.326349][   T29] audit: type=1326 audit(1740904484.412:57607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13970 comm="syz.0.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  192.351383][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  192.381163][T13978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=13978 comm=syz.1.3349
[  192.407569][T13977] uprobe: syz.1.3349:13977 failed to unregister, leaking uprobe
[  192.510162][T13985] bridge_slave_0: left allmulticast mode
[  192.515919][T13985] bridge_slave_0: left promiscuous mode
[  192.521593][T13985] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.530552][T13985] bridge_slave_1: left allmulticast mode
[  192.536300][T13985] bridge_slave_1: left promiscuous mode
[  192.542009][T13985] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.552209][T13985] bond0: (slave bond_slave_0): Releasing backup interface
[  192.561745][T13985] bond0: (slave bond_slave_1): Releasing backup interface
[  192.573194][T13985] team0: Port device team_slave_0 removed
[  192.581970][T13985] team0: Port device team_slave_1 removed
[  192.589265][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.596962][T13985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.606265][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.613720][T13985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.623706][T13988] FAULT_INJECTION: forcing a failure.
[  192.623706][T13988] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  192.637281][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.1.3351 Tainted: G        W          6.14.0-rc4-syzkaller-00278-gece144f151ac #0
[  192.637329][T13988] Tainted: [W]=WARN
[  192.637335][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  192.637420][T13988] Call Trace:
[  192.637429][T13988]  <TASK>
[  192.637439][T13988]  dump_stack_lvl+0xf2/0x150
[  192.637471][T13988]  dump_stack+0x15/0x1a
[  192.637556][T13988]  should_fail_ex+0x24a/0x260
[  192.637588][T13988]  should_fail_alloc_page+0xfd/0x110
[  192.637659][T13988]  __alloc_frozen_pages_noprof+0x109/0x340
[  192.637693][T13988]  alloc_pages_mpol+0xb4/0x260
[  192.637718][T13988]  vma_alloc_folio_noprof+0x1a0/0x310
[  192.637745][T13988]  do_wp_page+0x64b/0x2340
[  192.637820][T13988]  ? xfd_validate_state+0x46/0xf0
[  192.637846][T13988]  ? __rcu_read_lock+0x36/0x50
[  192.637872][T13988]  handle_mm_fault+0xc63/0x2ac0
[  192.637902][T13988]  exc_page_fault+0x296/0x650
[  192.637976][T13988]  ? mtree_load+0x3e/0x4f0
[  192.638064][T13988]  asm_exc_page_fault+0x26/0x30
[  192.638118][T13988] RIP: 0010:__put_user_4+0x11/0x20
[  192.638150][T13988] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[  192.638169][T13988] RSP: 0018:ffffc9000358bd28 EFLAGS: 00050206
[  192.638250][T13988] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000400000002000
[  192.638263][T13988] RDX: ffff8881086cc200 RSI: 00000000fffffff2 RDI: 0000000000000000
[  192.638299][T13988] RBP: ffffc9000358bed0 R08: ffffffff8186b690 R09: 0000000000000000
[  192.638311][T13988] R10: 0001ffffffffffff R11: ffff8881086cc200 R12: 0000000000000000
[  192.638323][T13988] R13: 0000400000001180 R14: 0000000000000000 R15: 0000000000000800
[  192.638338][T13988]  ? __se_sys_move_pages+0xb80/0x14b0
[  192.638454][T13988]  __se_sys_move_pages+0xb96/0x14b0
[  192.638492][T13988]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  192.638543][T13988]  ? vfs_write+0x644/0x920
[  192.638570][T13988]  ? __fget_files+0x17c/0x1c0
[  192.638604][T13988]  ? fput+0x1c4/0x200
[  192.638650][T13988]  ? ksys_write+0x176/0x1b0
[  192.638678][T13988]  __x64_sys_move_pages+0x78/0x90
[  192.638722][T13988]  x64_sys_call+0x179b/0x2dc0
[  192.638829][T13988]  do_syscall_64+0xc9/0x1c0
[  192.638861][T13988]  ? clear_bhb_loop+0x55/0xb0
[  192.638888][T13988]  ? clear_bhb_loop+0x55/0xb0
[  192.638996][T13988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.639024][T13988] RIP: 0033:0x7f33d344d169
[  192.639040][T13988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.639058][T13988] RSP: 002b:00007f33d1a75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[  192.639075][T13988] RAX: ffffffffffffffda RBX: 00007f33d3666160 RCX: 00007f33d344d169
[  192.639088][T13988] RDX: 0000400000000040 RSI: 0000000000002064 RDI: 0000000000000000
[  192.639100][T13988] RBP: 00007f33d1a75090 R08: 0000400000000000 R09: 0000000000000000
[  192.639161][T13988] R10: 0000400000001180 R11: 0000000000000246 R12: 0000000000000001
[  192.639174][T13988] R13: 0000000000000001 R14: 00007f33d3666160 R15: 00007ffec7eaa588
[  192.639215][T13988]  </TASK>
[  192.987834][T13991] IPv6: Can't replace route, no match found
[  193.064494][T14000] binfmt_misc: register: failed to install interpreter file ./file0
[  193.091453][T14003] loop0: detected capacity change from 0 to 512
[  193.101486][T14003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  193.114167][T14003] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.159924][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'.
[  193.172041][T14011] loop4: detected capacity change from 0 to 512
[  193.191255][T14008] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3358'.
[  193.204773][T14011] EXT4-fs (loop4): orphan cleanup on readonly fs
[  193.217170][T14011] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  193.233479][T14011] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  193.240648][T14011] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3357: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  193.260534][T14011] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3357: couldn't read orphan inode 13 (err -117)
[  193.273311][T14011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.295928][T14011] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  193.311549][T14011] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2
[  193.321882][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.323225][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  193.330642][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.346692][T14020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=14020 comm=syz.5.3363
[  193.350517][T14015] SELinux:  policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c
[  193.373326][T14015] SELinux: failed to load policy
[  193.399759][T14023] vhci_hcd: invalid port number 255
[  193.405027][T14023] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  193.412562][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.423242][T14019] uprobe: syz.5.3363:14019 failed to unregister, leaking uprobe
[  193.513011][T14033] IPv6: Can't replace route, no match found
[  193.591993][T14043] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3371'.
[  193.603418][T14023] 9pnet_fd: Insufficient options for proto=fd
[  193.610711][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3362'.
[  193.627770][T14023] hsr_slave_1 (unregistering): left promiscuous mode
[  193.673776][T14049] loop3: detected capacity change from 0 to 512
[  193.692541][T14049] EXT4-fs (loop3): orphan cleanup on readonly fs
[  193.699487][T14049] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  193.726771][T14049] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  193.761684][T14049] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3369: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  193.804834][T14049] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3369: couldn't read orphan inode 13 (err -117)
[  193.843201][T14059] binfmt_misc: register: failed to install interpreter file ./file0
[  193.852385][T14049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.868536][T14059] tipc: Started in network mode
[  193.873525][T14059] tipc: Node identity ba3f4d57d59d, cluster identity 4711
[  193.880847][T14059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.899030][T14037] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  193.899890][T14058] tipc: Disabling bearer <eth:syzkaller0>
[  193.926696][T14037] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  193.972807][T14065] 9pnet_rdma: rdma_create_trans (14065): problem binding to privport: 13
[  193.984260][T14073] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=14073 comm=syz.5.3379
[  194.032077][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.057891][T14070] uprobe: syz.5.3379:14070 failed to unregister, leaking uprobe
[  194.082923][T14083] loop0: detected capacity change from 0 to 2048
[  194.109484][T14083] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  194.121244][T14083] System zones: 0-4
[  194.125890][T14083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.141723][T14083] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.165132][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.194486][T14097] loop5: detected capacity change from 0 to 512
[  194.201591][T14097] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  194.214058][T14097] EXT4-fs (loop5): 1 truncate cleaned up
[  194.220533][T14097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.234315][T14097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.298237][T14109] IPv6: Can't replace route, no match found
[  194.370831][T14118] loop1: detected capacity change from 0 to 512
[  194.389679][T14118] EXT4-fs (loop1): orphan cleanup on readonly fs
[  194.397831][T14118] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  194.414629][T14118] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  194.421854][T14118] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.3399: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  194.440489][T14118] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3399: couldn't read orphan inode 13 (err -117)
[  194.454715][T14118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.469163][T14118] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  194.479128][T14118] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2
[  194.603267][T13000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.639984][T14137] binfmt_misc: register: failed to install interpreter file ./file0
[  194.651520][T14137] tipc: Started in network mode
[  194.656429][T14137] tipc: Node identity ae385b93cbf, cluster identity 4711
[  194.656553][T14138] loop0: detected capacity change from 0 to 512
[  194.663667][T14137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.678126][T14138] EXT4-fs (loop0): orphan cleanup on readonly fs
[  194.681810][T14137] +
: renamed from syzkaller0
[  194.685484][T14138] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  194.705193][T14137] tipc: Disabling bearer <eth:syzkaller0>
[  194.705258][T14138] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  194.718162][T14138] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.3406: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  194.737684][T14138] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3406: couldn't read orphan inode 13 (err -117)
[  194.750678][T14138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.808007][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3409'.
[  194.838800][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.903881][T14149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3413'.
[  194.923388][T14157] loop0: detected capacity change from 0 to 1024
[  194.939696][T14159] binfmt_misc: register: failed to install interpreter file ./file0
[  194.951166][T14157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.951479][T14161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=14161 comm=syz.1.3417
[  194.982854][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.011377][T14160] uprobe: syz.1.3417:14160 failed to unregister, leaking uprobe
[  195.073831][T14176] netlink: 28 bytes leftover after parsing attributes in process `'.
[  195.082114][T14176] netlink: 28 bytes leftover after parsing attributes in process `'.
[  195.130630][T14174] loop1: detected capacity change from 0 to 512
[  195.153644][T14174] EXT4-fs (loop1): orphan cleanup on readonly fs
[  195.166269][T14174] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  195.181482][T14174] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  195.215344][T14189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3429'.
[  195.223276][T14174] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.3423: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  195.281904][T14191] bond0: entered promiscuous mode
[  195.287215][T14191] bond0: entered allmulticast mode
[  195.293617][T14174] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3423: couldn't read orphan inode 13 (err -117)
[  195.305842][T14191] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.312916][T14174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.414473][T14203] binfmt_misc: register: failed to install interpreter file ./file0
[  195.552894][T13000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.701901][T14233] binfmt_misc: register: failed to install interpreter file ./file0
[  195.711326][T14233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.718532][T14233] +
: renamed from syzkaller0
[  195.724610][T14233] tipc: Disabling bearer <eth:syzkaller0>
[  195.791588][T14236] loop3: detected capacity change from 0 to 2048
[  195.819888][T14236] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  195.830598][T14236] System zones: 0-4
[  195.834964][T14236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.879207][T14242] binfmt_misc: register: failed to install interpreter file ./file0
[  195.892271][T14238] loop5: detected capacity change from 0 to 512
[  195.912273][T14236] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.930992][T14246] loop4: detected capacity change from 0 to 512
[  195.949446][T14246] EXT4-fs (loop4): orphan cleanup on readonly fs
[  195.956493][T14238] EXT4-fs (loop5): orphan cleanup on readonly fs
[  195.998268][T14250] FAULT_INJECTION: forcing a failure.
[  195.998268][T14250] name failslab, interval 1, probability 0, space 0, times 0
[  196.010961][T14250] CPU: 1 UID: 0 PID: 14250 Comm: syz.1.3451 Tainted: G        W          6.14.0-rc4-syzkaller-00278-gece144f151ac #0
[  196.010997][T14250] Tainted: [W]=WARN
[  196.011005][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  196.011019][T14250] Call Trace:
[  196.011026][T14250]  <TASK>
[  196.011034][T14250]  dump_stack_lvl+0xf2/0x150
[  196.011067][T14250]  dump_stack+0x15/0x1a
[  196.011093][T14250]  should_fail_ex+0x24a/0x260
[  196.011128][T14250]  should_failslab+0x8f/0xb0
[  196.011170][T14250]  kmem_cache_alloc_noprof+0x52/0x320
[  196.011191][T14250]  ? vm_area_dup+0x2c/0x130
[  196.011215][T14250]  vm_area_dup+0x2c/0x130
[  196.011237][T14250]  __split_vma+0xf7/0x6a0
[  196.011267][T14250]  vms_gather_munmap_vmas+0x2a5/0x7a0
[  196.011315][T14250]  mmap_region+0x464/0x1620
[  196.011339][T14250]  ? __rcu_read_unlock+0x4e/0x70
[  196.011364][T14250]  ? mntput_no_expire+0x70/0x3d0
[  196.011392][T14250]  ? mntput+0x49/0x70
[  196.011418][T14250]  ? terminate_walk+0x260/0x280
[  196.011463][T14250]  do_mmap+0x98a/0xc30
[  196.011494][T14250]  vm_mmap_pgoff+0x16d/0x2d0
[  196.011535][T14250]  ksys_mmap_pgoff+0xd0/0x330
[  196.011572][T14250]  ? fpregs_assert_state_consistent+0x83/0xa0
[  196.011597][T14250]  x64_sys_call+0x1940/0x2dc0
[  196.011623][T14250]  do_syscall_64+0xc9/0x1c0
[  196.011658][T14250]  ? clear_bhb_loop+0x55/0xb0
[  196.011689][T14250]  ? clear_bhb_loop+0x55/0xb0
[  196.011720][T14250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.011746][T14250] RIP: 0033:0x7f33d344d169
[  196.011764][T14250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.011782][T14250] RSP: 002b:00007f33d1ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  196.011800][T14250] RAX: ffffffffffffffda RBX: 00007f33d3665fa0 RCX: 00007f33d344d169
[  196.011813][T14250] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000
[  196.011826][T14250] RBP: 00007f33d1ab7090 R08: ffffffffffffffff R09: 0000000000000000
[  196.011841][T14250] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  196.011855][T14250] R13: 0000000000000001 R14: 00007f33d3665fa0 R15: 00007ffec7eaa588
[  196.011877][T14250]  </TASK>
[  196.014321][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.136773][T14238] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  196.165464][T14246] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  196.232836][T14238] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  196.281310][T14246] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  196.298612][T14246] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3450: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  196.319343][T14238] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.3448: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  196.339204][T14238] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3448: couldn't read orphan inode 13 (err -117)
[  196.359046][T14246] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3450: couldn't read orphan inode 13 (err -117)
[  196.373842][T14238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.375653][T14246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.398922][T14238] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  196.403010][T14238] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2
[  196.440440][T14246] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  196.476350][T14246] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2
[  196.487854][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.515556][T14263] loop1: detected capacity change from 0 to 512
[  196.546976][T14263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  196.567033][T14263] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.577874][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.616853][T13000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  196.696331][T14285] binfmt_misc: register: failed to install interpreter file ./file0
[  196.767346][T14295] loop0: detected capacity change from 0 to 1764
[  196.776762][T14295] netlink: 'syz.0.3462': attribute type 13 has an invalid length.
[  196.788626][T14295] gretap0: refused to change device tx_queue_len
[  196.795543][T14295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  196.974079][T14323] binfmt_misc: register: failed to install interpreter file ./file0
[  196.995575][T14323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.003755][T14323] +
: renamed from syzkaller0
[  197.014191][T14323] tipc: Disabling bearer <eth:syzkaller0>
[  197.020343][T14331] loop5: detected capacity change from 0 to 512
[  197.022882][T14326] 9pnet_rdma: rdma_create_trans (14326): problem binding to privport: 13
[  197.036459][   T29] kauditd_printk_skb: 761 callbacks suppressed
[  197.036474][   T29] audit: type=1326 audit(1740904489.339:58369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  197.067400][   T29] audit: type=1326 audit(1740904489.339:58370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  197.091232][   T29] audit: type=1326 audit(1740904489.339:58371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  197.101754][T14331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  197.115341][   T29] audit: type=1326 audit(1740904489.339:58372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  197.115430][   T29] audit: type=1326 audit(1740904489.339:58373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  197.115463][   T29] audit: type=1326 audit(1740904489.339:58374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14325 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  197.115494][   T29] audit: type=1326 audit(1740904489.369:58375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.0.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbd3f54127 code=0x7ffc0000
[  197.129388][T14331] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.151714][   T29] audit: type=1326 audit(1740904489.369:58376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.0.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbd3ef9359 code=0x7ffc0000
[  197.256783][   T29] audit: type=1326 audit(1740904489.369:58377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.0.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  197.257574][   T29] audit: type=1326 audit(1740904489.480:58378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.0.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcbd3f54127 code=0x7ffc0000
[  197.263636][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  197.334412][T14340] vhci_hcd: invalid port number 255
[  197.339744][T14340] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  197.390417][T14348] __nla_validate_parse: 4 callbacks suppressed
[  197.390433][T14348] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3477'.
[  197.400261][T14352] vhci_hcd: invalid port number 255
[  197.411024][T14352] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  197.644670][T14340] 9pnet_fd: Insufficient options for proto=fd
[  197.657092][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'.
[  197.764181][T14352] 9pnet_fd: Insufficient options for proto=fd
[  197.771000][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'.
[  197.797669][T14366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=14366 comm=syz.0.3481
[  197.843644][T14365] uprobe: syz.0.3481:14365 failed to unregister, leaking uprobe
[  197.871785][T14378] IPv6: Can't replace route, no match found
[  197.906473][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.916557][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.931649][T14374] SELinux:  policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c
[  197.946563][T14375] loop3: detected capacity change from 0 to 512
[  197.953796][T14375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  197.957157][T14374] SELinux: failed to load policy
[  197.986851][T14388] loop0: detected capacity change from 0 to 512
[  197.994832][T14375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.008888][T14375] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.020107][T14388] EXT4-fs (loop0): orphan cleanup on readonly fs
[  198.027012][T14388] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  198.042831][T14395] loop5: detected capacity change from 0 to 1024
[  198.049672][T14388] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  198.051009][T14395] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  198.056821][T14388] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.3489: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  198.067491][T14395] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  198.087229][T14388] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3489: couldn't read orphan inode 13 (err -117)
[  198.095015][T14395] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  198.116880][T14397] loop1: detected capacity change from 0 to 512
[  198.120565][T14388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.124807][T14397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.138416][T14395] EXT4-fs (loop5): invalid journal inode
[  198.150296][T14395] EXT4-fs (loop5): can't get journal size
[  198.157909][T14395] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.3491: blocks 2-2 from inode overlap system zone
[  198.171119][T14397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.172396][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.185123][T14397] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.195227][T14395] EXT4-fs (loop5): failed to initialize system zone (-117)
[  198.217305][T14395] EXT4-fs (loop5): mount failed
[  198.259270][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3493'.
[  198.273757][T14404] bond2: entered promiscuous mode
[  198.278858][T14404] bond2: entered allmulticast mode
[  198.284513][T14404] 8021q: adding VLAN 0 to HW filter on device bond2
[  198.309722][T14407] vhci_hcd: invalid port number 255
[  198.315073][T14407] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  198.433499][T14407] 9pnet_fd: Insufficient options for proto=fd
[  198.439929][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3494'.
[  198.506383][T14416] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=14416 comm=syz.4.3496
[  198.518740][T14418] IPv6: Can't replace route, no match found
[  198.544250][T14415] uprobe: syz.4.3496:14415 failed to unregister, leaking uprobe
[  198.709344][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.735198][T14427] loop3: detected capacity change from 0 to 512
[  198.743353][T14427] EXT4-fs (loop3): orphan cleanup on readonly fs
[  198.750615][T14427] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  198.766379][T14427] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  198.773354][T14427] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3501: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  198.792017][T14427] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3501: couldn't read orphan inode 13 (err -117)
[  198.804544][T14427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.818744][T14427] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  198.828695][T14427] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  198.871206][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.871917][T13000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.937901][T14432] bridge_slave_0: left allmulticast mode
[  198.943595][T14432] bridge_slave_0: left promiscuous mode
[  198.949289][T14432] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.957101][T14434] loop3: detected capacity change from 0 to 512
[  198.965858][T14434] EXT4-fs (loop3): orphan cleanup on readonly fs
[  198.966041][T14432] bridge_slave_1: left allmulticast mode
[  198.972736][T14434] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  198.977963][T14432] bridge_slave_1: left promiscuous mode
[  198.994279][T14434] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  198.998751][T14432] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.006718][T14434] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3502: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  199.030623][T14434] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3502: couldn't read orphan inode 13 (err -117)
[  199.044662][T14432] bond0: (slave bond_slave_0): Releasing backup interface
[  199.044779][T14434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  199.073675][T14432] bond0: (slave bond_slave_1): Releasing backup interface
[  199.089239][T14432] team0: Port device team_slave_0 removed
[  199.096950][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.107650][T14432] team0: Port device team_slave_1 removed
[  199.114658][T14432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.122278][T14432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.131093][T14432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.138581][T14432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.142865][T14440] vhci_hcd: invalid port number 255
[  199.151015][T14440] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  199.248987][T14447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.257534][T14447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.267914][T14447] SELinux:  policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c
[  199.279057][T14447] SELinux: failed to load policy
[  199.284784][T14450] loop0: detected capacity change from 0 to 512
[  199.297528][T14450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  199.310436][T14450] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.328477][T14440] 9pnet_fd: Insufficient options for proto=fd
[  199.334986][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3506'.
[  199.346608][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  199.468049][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'.
[  199.485036][T14462] bond1: entered promiscuous mode
[  199.490229][T14462] bond1: entered allmulticast mode
[  199.497289][T14462] 8021q: adding VLAN 0 to HW filter on device bond1
[  199.608079][T14472] loop5: detected capacity change from 0 to 512
[  199.646246][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3514'.
[  199.660703][T14472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.807068][T14470] bond2: entered promiscuous mode
[  199.812509][T14470] bond2: entered allmulticast mode
[  199.819140][T14472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.865802][T14470] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.880874][T14472] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.904391][T14480] loop1: detected capacity change from 0 to 512
[  200.370642][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.372275][T14491] loop3: detected capacity change from 0 to 512
[  200.396237][T14491] EXT4-fs (loop3): orphan cleanup on readonly fs
[  200.399716][T14495] vhci_hcd: invalid port number 255
[  200.403304][T14491] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  200.407860][T14495] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  200.444555][T14496] loop0: detected capacity change from 0 to 1764
[  200.454509][T14496] netlink: 'syz.0.3518': attribute type 13 has an invalid length.
[  200.464718][T14496] gretap0: refused to change device tx_queue_len
[  200.473611][T14496] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  200.508207][T14491] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  200.568311][T14491] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3520: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  200.611730][T14491] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3520: couldn't read orphan inode 13 (err -117)
[  200.635243][T14491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  200.687426][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.724036][T14495] 9pnet_fd: Insufficient options for proto=fd
[  200.730437][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3521'.
[  200.793925][T14510] loop4: detected capacity change from 0 to 512
[  200.825314][T14510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.843663][T14510] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.862885][T14510] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3525: corrupted inode contents
[  200.886460][T14510] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.3525: mark_inode_dirty error
[  200.901822][T14510] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3525: corrupted inode contents
[  200.927827][T14510] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.3525: mark_inode_dirty error
[  200.989764][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.013239][T14526] IPv6: Can't replace route, no match found
[  201.092003][T14527] loop5: detected capacity change from 0 to 512
[  201.098801][T14527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.125554][T14527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.138571][T14527] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.167810][T14542] loop4: detected capacity change from 0 to 1024
[  201.175760][T14542] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  201.186714][T14542] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  201.196579][T14542] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  201.207540][T14542] EXT4-fs (loop4): invalid journal inode
[  201.213982][T14542] EXT4-fs (loop4): can't get journal size
[  201.232438][T14542] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.3538: blocks 2-2 from inode overlap system zone
[  201.247054][T14542] EXT4-fs (loop4): failed to initialize system zone (-117)
[  201.254700][T14542] EXT4-fs (loop4): mount failed
[  201.285573][T14545] binfmt_misc: register: failed to install interpreter file ./file0
[  201.295894][T14545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.304563][T14544] tipc: Disabling bearer <eth:syzkaller0>
[  201.631456][T14559] IPv6: Can't replace route, no match found
[  201.792473][T14565] loop0: detected capacity change from 0 to 1764
[  201.801632][T14565] netlink: 'syz.0.3547': attribute type 13 has an invalid length.
[  201.812085][T14565] gretap0: refused to change device tx_queue_len
[  201.818931][T14565] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  201.910206][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.003605][   T29] kauditd_printk_skb: 2334 callbacks suppressed
[  202.003623][   T29] audit: type=1326 audit(1740904494.351:60713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  202.062394][T14574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.071176][T14574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.080998][   T29] audit: type=1326 audit(1740904494.351:60714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f28c39359 code=0x7ffc0000
[  202.104891][   T29] audit: type=1326 audit(1740904494.351:60715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  202.107729][T14574] SELinux:  policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c
[  202.128624][   T29] audit: type=1326 audit(1740904494.381:60716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  202.162402][   T29] audit: type=1326 audit(1740904494.381:60717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f28c39359 code=0x7ffc0000
[  202.165984][T14574] SELinux: failed to load policy
[  202.186186][   T29] audit: type=1326 audit(1740904494.381:60718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  202.214706][   T29] audit: type=1326 audit(1740904494.381:60719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  202.223451][T14585] IPv6: Can't replace route, no match found
[  202.238533][   T29] audit: type=1326 audit(1740904494.381:60720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f28c39359 code=0x7ffc0000
[  202.268033][   T29] audit: type=1326 audit(1740904494.381:60721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  202.291677][   T29] audit: type=1326 audit(1740904494.391:60722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  202.360592][T14588] loop4: detected capacity change from 0 to 512
[  202.376291][T14588] EXT4-fs (loop4): orphan cleanup on readonly fs
[  202.384523][T14588] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  202.399736][T14588] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  202.407000][T14588] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3557: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  202.425494][T14588] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3557: couldn't read orphan inode 13 (err -117)
[  202.439640][T14588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.462872][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.507594][T14597] vhci_hcd: invalid port number 255
[  202.512889][T14597] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  202.625143][T14600] loop4: detected capacity change from 0 to 512
[  202.632634][T14600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  202.645429][T14597] 9pnet_fd: Insufficient options for proto=fd
[  202.651115][T14600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.655032][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3561'.
[  202.664363][T14600] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.751035][T14610] binfmt_misc: register: failed to install interpreter file ./file0
[  202.760598][T14610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.767954][T14610] +
: renamed from syzkaller0
[  202.774457][T14610] tipc: Disabling bearer <eth:syzkaller0>
[  202.958480][T14625] 9pnet_rdma: rdma_create_trans (14625): problem binding to privport: 13
[  202.968061][T14629] loop3: detected capacity change from 0 to 512
[  202.976188][T14629] EXT4-fs (loop3): orphan cleanup on readonly fs
[  202.983568][T14629] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  202.999003][T14629] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  203.005766][T14633] loop1: detected capacity change from 0 to 164
[  203.006346][T14629] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3571: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  203.012301][T14633] iso9660: Unknown parameter 'block?0x0000000000000200'
[  203.032923][T14629] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3571: couldn't read orphan inode 13 (err -117)
[  203.057663][T14634] loop5: detected capacity change from 0 to 1764
[  203.059521][T14629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.085994][T14634] netlink: 'syz.5.3569': attribute type 13 has an invalid length.
[  203.102862][T14634] gretap0: refused to change device tx_queue_len
[  203.120449][T14634] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  203.174605][T14642] futex_wake_op: syz.5.3576 tries to shift op by -1; fix this program
[  203.198713][T14642] loop5: detected capacity change from 0 to 164
[  203.266519][T14653] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  203.275429][T14653] FAULT_INJECTION: forcing a failure.
[  203.275429][T14653] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.288717][T14653] CPU: 0 UID: 0 PID: 14653 Comm: syz.0.3581 Tainted: G        W          6.14.0-rc4-syzkaller-00278-gece144f151ac #0
[  203.288797][T14653] Tainted: [W]=WARN
[  203.288806][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  203.288821][T14653] Call Trace:
[  203.288830][T14653]  <TASK>
[  203.288838][T14653]  dump_stack_lvl+0xf2/0x150
[  203.288868][T14653]  dump_stack+0x15/0x1a
[  203.288890][T14653]  should_fail_ex+0x24a/0x260
[  203.288919][T14653]  should_fail+0xb/0x10
[  203.288949][T14653]  should_fail_usercopy+0x1a/0x20
[  203.289025][T14653]  _copy_to_user+0x20/0xa0
[  203.289049][T14653]  simple_read_from_buffer+0xa0/0x110
[  203.289084][T14653]  proc_fail_nth_read+0xf9/0x140
[  203.289122][T14653]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  203.289180][T14653]  vfs_read+0x19b/0x6f0
[  203.289206][T14653]  ? __rcu_read_unlock+0x4e/0x70
[  203.289234][T14653]  ? __fget_files+0x17c/0x1c0
[  203.289276][T14653]  ksys_read+0xe8/0x1b0
[  203.289302][T14653]  __x64_sys_read+0x42/0x50
[  203.289366][T14653]  x64_sys_call+0x2874/0x2dc0
[  203.289398][T14653]  do_syscall_64+0xc9/0x1c0
[  203.289436][T14653]  ? clear_bhb_loop+0x55/0xb0
[  203.289570][T14653]  ? clear_bhb_loop+0x55/0xb0
[  203.289604][T14653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.289643][T14653] RIP: 0033:0x7fcbd3f5bb7c
[  203.289661][T14653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  203.289737][T14653] RSP: 002b:00007fcbd25c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  203.289771][T14653] RAX: ffffffffffffffda RBX: 00007fcbd4175fa0 RCX: 00007fcbd3f5bb7c
[  203.289785][T14653] RDX: 000000000000000f RSI: 00007fcbd25c70a0 RDI: 0000000000000007
[  203.289799][T14653] RBP: 00007fcbd25c7090 R08: 0000000000000000 R09: 0000000000000000
[  203.289813][T14653] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.289828][T14653] R13: 0000000000000000 R14: 00007fcbd4175fa0 R15: 00007ffe779cd2c8
[  203.289850][T14653]  </TASK>
[  203.512598][T14658] loop0: detected capacity change from 0 to 512
[  203.541321][T14662] IPv6: Can't replace route, no match found
[  203.612381][T14668] loop4: detected capacity change from 0 to 512
[  203.620216][T14668] EXT4-fs (loop4): orphan cleanup on readonly fs
[  203.627915][T14668] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  203.644561][T14668] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  203.652413][T14668] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3587: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  203.670725][T14670] loop5: detected capacity change from 0 to 1764
[  203.679444][T14668] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3587: couldn't read orphan inode 13 (err -117)
[  203.697322][T14668] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  203.707918][T14668] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2
[  203.712589][T14670] netlink: 'syz.5.3586': attribute type 13 has an invalid length.
[  203.732337][T14670] gretap0: refused to change device tx_queue_len
[  203.742911][T14670] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  203.955679][T14682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3593'.
[  204.025949][T14688] IPv6: Can't replace route, no match found
[  204.041353][T14690] loop1: detected capacity change from 0 to 512
[  204.053046][T14690] EXT4-fs (loop1): orphan cleanup on readonly fs
[  204.061531][T14690] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  204.085992][T14690] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  204.096548][T14690] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.3597: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  204.129366][T14695] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3598'.
[  204.175814][T14694] loop4: detected capacity change from 0 to 1024
[  204.184122][T14690] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3597: couldn't read orphan inode 13 (err -117)
[  204.208429][T14694] EXT4-fs: Ignoring removed i_version option
[  204.214640][T14694] EXT4-fs: Ignoring removed orlov option
[  204.806259][T14720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.125805][T14720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.195507][T14720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.265265][T14720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.295684][T14727] loop1: detected capacity change from 0 to 512
[  205.304467][T14727] EXT4-fs (loop1): orphan cleanup on readonly fs
[  205.311448][T14727] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  205.327988][T14727] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  205.333997][T14720] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.347035][T14727] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.3611: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  205.369101][T14720] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.377704][T14727] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3611: couldn't read orphan inode 13 (err -117)
[  205.393858][T14720] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.397913][T14735] loop3: detected capacity change from 0 to 512
[  205.408936][T14727] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  205.409640][T14720] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.429177][T14727] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2
[  205.509488][T14737] 9pnet_rdma: rdma_create_trans (14737): problem binding to privport: 13
[  205.619643][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.628509][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.638230][T14743] SELinux:  policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c
[  205.649061][T14743] SELinux: failed to load policy
[  205.658163][T14752] loop5: detected capacity change from 0 to 1764
[  206.230253][T14783] IPv6: Can't replace route, no match found
[  206.296281][T14781] loop0: detected capacity change from 0 to 512
[  206.308135][T14781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  206.332588][T14781] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.489429][T14804] loop3: detected capacity change from 0 to 512
[  206.541489][T14806] vhci_hcd: invalid port number 255
[  206.546865][T14806] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  206.740271][T14819] loop5: detected capacity change from 0 to 512
[  206.831051][T14806] 9pnet_fd: Insufficient options for proto=fd
[  206.855457][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3640'.
[  206.947082][T14822] vhci_hcd: invalid port number 255
[  206.952375][T14822] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  206.989658][   T29] kauditd_printk_skb: 1838 callbacks suppressed
[  206.989676][   T29] audit: type=1326 audit(1740904499.361:62561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  207.250185][T14822] 9pnet_fd: Insufficient options for proto=fd
[  207.285824][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'.
[  207.340696][   T29] audit: type=1326 audit(1740904499.361:62562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f28c39359 code=0x7ffc0000
[  207.364456][   T29] audit: type=1326 audit(1740904499.361:62563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  207.388289][   T29] audit: type=1326 audit(1740904499.371:62564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  207.412044][   T29] audit: type=1326 audit(1740904499.371:62565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f28c39359 code=0x7ffc0000
[  207.435855][   T29] audit: type=1326 audit(1740904499.371:62566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  207.459564][   T29] audit: type=1326 audit(1740904499.402:62567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  207.483135][   T29] audit: type=1326 audit(1740904499.402:62568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f28c39359 code=0x7ffc0000
[  207.506896][   T29] audit: type=1326 audit(1740904499.402:62569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  207.530570][   T29] audit: type=1326 audit(1740904499.402:62570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14801 comm="syz.4.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f28c94127 code=0x7ffc0000
[  207.735710][T14867] uprobe: syz.1.3655:14867 failed to unregister, leaking uprobe
[  207.795374][T14878] loop1: detected capacity change from 0 to 512
[  207.853787][T14879] loop0: detected capacity change from 0 to 512
[  207.862122][T14879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  207.901387][T14879] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.526872][T14888] vhci_hcd: invalid port number 255
[  208.532317][T14888] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  208.708789][T14888] 9pnet_fd: Insufficient options for proto=fd
[  208.715387][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3662'.
[  208.778562][T14907] loop4: detected capacity change from 0 to 512
[  208.797024][T14905] loop0: detected capacity change from 0 to 512
[  208.812548][T14905] EXT4-fs (loop0): orphan cleanup on readonly fs
[  208.819900][T14905] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  208.843390][T14907] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.847708][T14905] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  208.870687][T14915] loop3: detected capacity change from 0 to 1024
[  208.880984][T14905] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.3668: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  208.899589][T14915] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  208.899722][T14905] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3668: couldn't read orphan inode 13 (err -117)
[  208.910522][T14915] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  208.912973][T14915] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  208.943772][T14915] EXT4-fs (loop3): invalid journal inode
[  208.949509][T14915] EXT4-fs (loop3): can't get journal size
[  208.957293][T14915] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.3671: blocks 2-2 from inode overlap system zone
[  208.973704][T14915] EXT4-fs (loop3): failed to initialize system zone (-117)
[  208.983404][T14915] EXT4-fs (loop3): mount failed
[  208.985339][T14920] loop4: detected capacity change from 0 to 512
[  209.025315][T14920] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.191665][T14932] loop3: detected capacity change from 0 to 512
[  209.200018][T14932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  209.215536][T14932] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.454113][T14938] futex_wake_op: syz.5.3677 tries to shift op by -1; fix this program
[  209.606350][T14947] vhci_hcd: invalid port number 255
[  209.611646][T14947] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  209.765478][T14947] 9pnet_fd: Insufficient options for proto=fd
[  209.772042][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3681'.
[  209.870876][T14953] uprobe: syz.1.3682:14953 failed to unregister, leaking uprobe
[  209.916736][T14961] binfmt_misc: register: failed to install interpreter file ./file0
[  209.925793][T14961] +
: renamed from syzkaller0
[  209.982597][T14968] loop0: detected capacity change from 0 to 1024
[  209.997389][T14968] EXT4-fs: Ignoring removed i_version option
[  210.003559][T14968] EXT4-fs: Ignoring removed orlov option
[  210.022142][T14973] loop4: detected capacity change from 0 to 512
[  210.028623][T14975] loop5: detected capacity change from 0 to 2048
[  210.036929][T14973] EXT4-fs (loop4): orphan cleanup on readonly fs
[  210.037777][T14978] vhci_hcd: invalid port number 255
[  210.048730][T14978] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  210.048732][T14982] loop3: detected capacity change from 0 to 164
[  210.062734][T14973] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  210.078151][T14973] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  210.085664][T14973] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3692: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  210.105907][T14973] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3692: couldn't read orphan inode 13 (err -117)
[  210.124555][T14975] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  210.134045][T14975] System zones: 0-4
[  210.139745][T14975] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.200094][T14986] 9pnet_fd: Insufficient options for proto=fd
[  210.207770][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3693'.
[  210.224879][T14991] loop0: detected capacity change from 0 to 512
[  210.237560][T14993] loop4: detected capacity change from 0 to 512
[  210.254852][T14991] EXT4-fs (loop0): orphan cleanup on readonly fs
[  210.254896][T14993] EXT4-fs (loop4): orphan cleanup on readonly fs
[  210.286697][T14993] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  210.296301][T14991] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  210.319808][T14993] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  210.335742][T14993] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3696: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  210.365979][T14991] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  210.379392][T14991] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.3695: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  210.405694][T14991] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3695: couldn't read orphan inode 13 (err -117)
[  210.423142][T14993] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3696: couldn't read orphan inode 13 (err -117)
[  210.467654][T15006] binfmt_misc: register: failed to install interpreter file ./file0
[  210.480720][T15006] +
: renamed from syzkaller0
[  210.611130][T15007] loop5: detected capacity change from 0 to 512
[  210.618477][T15007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  210.650038][T15007] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.673168][T15021] loop1: detected capacity change from 0 to 512
[  210.720902][T15022] loop4: detected capacity change from 0 to 512
[  210.840751][T15022] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.861030][T15022] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3702: corrupted inode contents
[  210.874814][T15022] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.3702: mark_inode_dirty error
[  210.887897][T15022] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3702: corrupted inode contents
[  210.901394][T15022] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.3702: mark_inode_dirty error
[  210.922561][T15021] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.565126][T15036] vhci_hcd: invalid port number 255
[  211.570501][T15036] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  211.584286][T15030] uprobe: syz.0.3708:15030 failed to unregister, leaking uprobe
[  211.629739][T15041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3706'.
[  211.732280][T15036] 9pnet_fd: Insufficient options for proto=fd
[  211.749829][T15050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3712'.
[  211.784505][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3711'.
[  211.945667][T15059] loop5: detected capacity change from 0 to 1764
[  211.956174][T15059] netlink: 'syz.5.3715': attribute type 13 has an invalid length.
[  211.966363][T15059] gretap0: refused to change device tx_queue_len
[  212.006663][   T29] kauditd_printk_skb: 1189 callbacks suppressed
[  212.006681][   T29] audit: type=1326 audit(1740904504.404:63760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f986a68d169 code=0x7ffc0000
[  212.065540][T15059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  212.110481][T15063] IPv6: Can't replace route, no match found
[  212.193431][   T29] audit: type=1326 audit(1740904504.534:63761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15053 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f986a629359 code=0x7ffc0000
[  212.217145][   T29] audit: type=1326 audit(1740904504.534:63762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15053 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986a68d169 code=0x7ffc0000
[  212.243090][   T29] audit: type=1326 audit(1740904504.534:63763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15053 comm="syz.5.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986a68d169 code=0x7ffc0000
[  212.323171][T15066] uprobe: syz.5.3720:15066 failed to unregister, leaking uprobe
[  212.334737][T15070] loop4: detected capacity change from 0 to 512
[  212.363048][T15070] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.390516][T15077] loop5: detected capacity change from 0 to 512
[  212.412311][T15077] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.492139][T15084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15084 comm=syz.4.3724
[  212.526639][T15083] uprobe: syz.4.3724:15083 failed to unregister, leaking uprobe
[  212.545302][T15080] loop3: detected capacity change from 0 to 512
[  212.552240][T15080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  212.696397][T15080] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.715439][T15097] binfmt_misc: register: failed to install interpreter file ./file0
[  212.724474][T15097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.732021][T15097] +
: renamed from syzkaller0
[  212.738563][T15097] tipc: Disabling bearer <eth:syzkaller0>
[  212.817667][T15098] loop4: detected capacity change from 0 to 512
[  212.921122][T15098] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.941593][T15098] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3727: corrupted inode contents
[  212.954040][T15098] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.3727: mark_inode_dirty error
[  212.965907][T15098] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3727: corrupted inode contents
[  212.978304][T15098] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.3727: mark_inode_dirty error
[  213.056535][T15104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3730'.
[  213.152289][T15107] vhci_hcd: invalid port number 255
[  213.157833][T15107] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  213.665982][   T29] audit: type=1326 audit(1740904506.019:63764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.0.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  213.689736][   T29] audit: type=1326 audit(1740904506.029:63765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.0.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  213.713338][   T29] audit: type=1326 audit(1740904506.029:63766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.0.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  213.737024][   T29] audit: type=1326 audit(1740904506.029:63767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.0.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  213.760731][   T29] audit: type=1326 audit(1740904506.029:63768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.0.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  213.784346][   T29] audit: type=1326 audit(1740904506.029:63769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.0.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcbd3f5d169 code=0x7ffc0000
[  213.853942][T15122] loop0: detected capacity change from 0 to 1764
[  213.891617][T15129] loop3: detected capacity change from 0 to 512
[  213.917458][T15122] netlink: 'syz.0.3737': attribute type 13 has an invalid length.
[  213.930409][T15107] 9pnet_fd: Insufficient options for proto=fd
[  213.937036][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3731'.
[  213.950156][T15129] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.991264][T15122] gretap0: refused to change device tx_queue_len
[  214.000217][T15122] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  214.311631][T15146] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3744'.
[  214.346326][T15148] loop3: detected capacity change from 0 to 512
[  214.515001][T15142] futex_wake_op: syz.0.3743 tries to shift op by -1; fix this program
[  214.528243][T15148] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.542971][T15148] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.3739: corrupted inode contents
[  214.555921][T15148] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.3739: mark_inode_dirty error
[  214.569322][T15148] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.3739: corrupted inode contents
[  214.586213][T15148] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.3739: mark_inode_dirty error
[  214.614022][T15154] loop1: detected capacity change from 0 to 1764
[  214.704865][T15154] netlink: 'syz.1.3745': attribute type 13 has an invalid length.
[  214.812221][T15154] gretap0: refused to change device tx_queue_len
[  214.857586][T15154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  215.119421][T15162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.139468][T15162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.174692][T15169] loop5: detected capacity change from 0 to 512
[  215.184961][T15169] EXT4-fs (loop5): orphan cleanup on readonly fs
[  215.191661][T15169] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  215.207824][T15169] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  215.214674][T15169] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.3751: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  215.233862][T15169] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3751: couldn't read orphan inode 13 (err -117)
[  215.321551][T15176] loop5: detected capacity change from 0 to 1024
[  215.334766][T15176] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  215.345845][T15176] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  215.360056][T15178] vhci_hcd: invalid port number 255
[  215.365289][T15178] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  215.381161][T15176] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  215.402310][T15176] EXT4-fs (loop5): invalid journal inode
[  215.416704][T15176] EXT4-fs (loop5): can't get journal size
[  215.430323][T15176] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.3752: blocks 2-2 from inode overlap system zone
[  215.446043][T15176] EXT4-fs (loop5): failed to initialize system zone (-117)
[  215.464551][T15186] loop4: detected capacity change from 0 to 512
[  215.481859][T15186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  215.500787][T15176] EXT4-fs (loop5): mount failed
[  215.521959][T15186] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.539825][T15178] 9pnet_fd: Insufficient options for proto=fd
[  215.567011][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3754'.
[  215.992861][T15206] loop3: detected capacity change from 0 to 512
[  216.016590][T15206] EXT4-fs (loop3): orphan cleanup on readonly fs
[  216.028571][T15206] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  216.044162][T15206] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  216.069478][T15206] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3760: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  216.091167][T15206] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3760: couldn't read orphan inode 13 (err -117)
[  216.117420][T15206] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  216.128648][T15206] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  216.196135][T15215] loop0: detected capacity change from 0 to 512
[  216.214472][T15215] EXT4-fs (loop0): orphan cleanup on readonly fs
[  216.221615][T15215] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  216.238013][T15215] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  216.245010][T15215] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.3764: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  216.290919][T15215] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3764: couldn't read orphan inode 13 (err -117)
[  216.321545][T15220] loop3: detected capacity change from 0 to 512
[  216.363879][T15220] EXT4-fs (loop3): orphan cleanup on readonly fs
[  216.394518][T15220] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  216.419745][T15220] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  216.426848][T15220] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3766: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  216.445340][T15220] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3766: couldn't read orphan inode 13 (err -117)
[  216.462280][T15220] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  216.473452][T15220] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  216.528689][T15231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=15231 comm=syz.5.3770
[  216.563259][T15230] uprobe: syz.5.3770:15230 failed to unregister, leaking uprobe
[  216.581902][T15241] vhci_hcd: invalid port number 255
[  216.587206][T15241] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  216.670612][T15257] loop0: detected capacity change from 0 to 512
[  216.697812][T15257] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.772815][T15241] 9pnet_fd: Insufficient options for proto=fd
[  216.779355][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3769'.
[  216.811408][T15266] loop5: detected capacity change from 0 to 1764
[  216.820367][T15266] netlink: 'syz.5.3774': attribute type 13 has an invalid length.
[  216.832608][T15266] gretap0: refused to change device tx_queue_len
[  216.840479][T15266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  216.870368][T15267] loop0: detected capacity change from 0 to 512
[  216.878623][T15267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  216.898221][T15267] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.994882][   T29] kauditd_printk_skb: 603 callbacks suppressed
[  216.994901][   T29] audit: type=1326 audit(1740904509.399:64373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.3.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  217.025489][   T29] audit: type=1326 audit(1740904509.410:64374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.3.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  217.049237][   T29] audit: type=1326 audit(1740904509.410:64375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.3.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  217.073012][   T29] audit: type=1326 audit(1740904509.410:64376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.3.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  217.096681][   T29] audit: type=1326 audit(1740904509.410:64377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.3.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  217.105006][T15287] loop3: detected capacity change from 0 to 1764
[  217.120537][   T29] audit: type=1326 audit(1740904509.410:64378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15278 comm="syz.3.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  217.150437][   T29] audit: type=1326 audit(1740904509.410:64379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe3bdbffa25 code=0x7ffc0000
[  217.160334][   T29] audit: type=1326 audit(1740904509.440:64380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15283 comm="syz.5.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986a68d169 code=0x7ffc0000
[  217.197632][   T29] audit: type=1326 audit(1740904509.440:64381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15283 comm="syz.5.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986a68d169 code=0x7ffc0000
[  217.221300][   T29] audit: type=1326 audit(1740904509.440:64382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15283 comm="syz.5.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986a68d169 code=0x7ffc0000
[  217.262085][T15280] netlink: 'syz.3.3780': attribute type 13 has an invalid length.
[  217.271862][T15280] gretap0: refused to change device tx_queue_len
[  217.278623][T15280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  217.306854][T15291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.314187][T15291] +
: renamed from syzkaller0
[  217.320783][T15291] tipc: Disabling bearer <eth:syzkaller0>
[  217.335735][T15293] vhci_hcd: invalid port number 255
[  217.341540][T15293] vhci_hcd: default hub control req: 0300 v0004 i00ff l0
[  217.377178][T15299] loop4: detected capacity change from 0 to 512
[  217.392355][T15299] EXT4-fs (loop4): orphan cleanup on readonly fs
[  217.405627][T15299] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  217.421513][T15299] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  217.428559][T15299] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3788: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  217.447324][T15299] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3788: couldn't read orphan inode 13 (err -117)
[  217.463109][T15299] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  217.481797][T15306] loop1: detected capacity change from 0 to 1764
[  217.490373][T15299] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2
[  217.502230][T15306] netlink: 'syz.1.3789': attribute type 13 has an invalid length.
[  217.513258][T15306] gretap0: refused to change device tx_queue_len
[  217.520631][T15306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  217.543106][T15293] 9pnet_fd: Insufficient options for proto=fd
[  217.550138][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'.
[  217.608419][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3790'.
[  217.630228][T15313] loop3: detected capacity change from 0 to 512
[  217.660299][T15315] loop0: detected capacity change from 0 to 512
[  217.709436][T15322] futex_wake_op: syz.1.3796 tries to shift op by -1; fix this program
[  217.709634][T15315] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.731276][T15322] loop1: detected capacity change from 0 to 164
[  217.830929][T15333] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=15333 comm=syz.1.3800
[  217.874520][T15334] loop4: detected capacity change from 0 to 1764
[  217.877246][T15334] netlink: 'syz.4.3797': attribute type 13 has an invalid length.
[  217.897189][T15334] gretap0: refused to change device tx_queue_len
[  217.911956][T15334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  218.002034][T15344] loop0: detected capacity change from 0 to 1764
[  218.014854][T15344] netlink: 'syz.0.3801': attribute type 13 has an invalid length.
[  218.040854][T15344] gretap0: refused to change device tx_queue_len
[  218.047807][T15344] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  218.137123][T15358] loop1: detected capacity change from 0 to 512
[  218.144079][T15358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  218.145305][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3806'.
[  218.198055][T15358] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.261155][T15379] loop0: detected capacity change from 0 to 1024
[  218.306680][T15379] EXT4-fs: Ignoring removed i_version option
[  218.312873][T15379] EXT4-fs: Ignoring removed orlov option
[  218.323579][T15384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=15384 comm=syz.5.3813
[  218.569333][T15397] loop5: detected capacity change from 0 to 1764
[  218.577889][T15397] netlink: 'syz.5.3816': attribute type 13 has an invalid length.
[  218.588494][T15397] gretap0: refused to change device tx_queue_len
[  218.596178][T15397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  218.874093][T15420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3820'.
[  218.926140][T15425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.933955][T15425] +
: renamed from syzkaller0
[  218.940216][T15425] tipc: Disabling bearer <eth:syzkaller0>
[  218.993383][T15429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.006633][T15429] +
: renamed from syzkaller0
[  219.014018][T15429] tipc: Disabling bearer <eth:syzkaller0>
[  219.164682][T15435] loop5: detected capacity change from 0 to 512
[  219.172815][T15435] EXT4-fs (loop5): orphan cleanup on readonly fs
[  219.180835][T15435] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  219.181180][T15435] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  219.181297][T15435] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.3827: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  219.181544][T15435] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3827: couldn't read orphan inode 13 (err -117)
[  219.196528][T15435] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  219.196833][T15435] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2
[  219.332638][T15442] loop5: detected capacity change from 0 to 1024
[  219.339905][T15442] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  219.350863][T15442] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  219.351330][T15441] loop4: detected capacity change from 0 to 1764
[  219.368078][T15442] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  219.380519][T15442] EXT4-fs (loop5): invalid journal inode
[  219.387138][T15442] EXT4-fs (loop5): can't get journal size
[  219.389235][T15441] netlink: 'syz.4.3828': attribute type 13 has an invalid length.
[  219.402163][T15442] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.3829: blocks 2-2 from inode overlap system zone
[  219.416223][T15441] gretap0: refused to change device tx_queue_len
[  219.416343][T15442] EXT4-fs (loop5): failed to initialize system zone (-117)
[  219.431618][T15442] EXT4-fs (loop5): mount failed
[  219.447950][T15441] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  219.476462][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'.
[  219.532332][T15456] loop3: detected capacity change from 0 to 512
[  219.552488][T15456] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.606778][T15471] netlink: 'syz.5.3832': attribute type 13 has an invalid length.
[  219.620562][T15471] gretap0: refused to change device tx_queue_len
[  219.632666][T15471] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  219.703630][T15487] loop3: detected capacity change from 0 to 512
[  219.735061][T15487] EXT4-fs (loop3): orphan cleanup on readonly fs
[  219.742561][T15487] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  219.758681][T15491] loop5: detected capacity change from 0 to 1024
[  219.766057][T15491] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  219.766118][T15487] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  219.776985][T15491] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  219.777111][T15491] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  219.786352][T15487] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3840: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  219.795575][T15491] EXT4-fs (loop5): invalid journal inode
[  219.806744][T15487] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3840: couldn't read orphan inode 13 (err -117)
[  219.823839][T15491] EXT4-fs (loop5): can't get journal size
[  219.845202][T15487] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  219.847967][T15491] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.3842: blocks 2-2 from inode overlap system zone
[  219.855256][T15487] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  219.885014][T15491] EXT4-fs (loop5): failed to initialize system zone (-117)
[  219.892509][T15491] EXT4-fs (loop5): mount failed
[  219.915325][T15497] loop1: detected capacity change from 0 to 2048
[  219.921003][T15499] loop0: detected capacity change from 0 to 512
[  219.950879][T15497] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  219.953419][T15499] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.969882][T15497] System zones: 0-4
[  219.978635][T15497] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.050978][T15513] loop5: detected capacity change from 0 to 164
[  220.059987][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3851'.
[  220.073387][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3851'.
[  220.120934][T15525] loop3: detected capacity change from 0 to 512
[  220.135603][T15528] loop0: detected capacity change from 0 to 1024
[  220.143299][T15525] EXT4-fs (loop3): orphan cleanup on readonly fs
[  220.143454][T15528] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  220.150780][T15525] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  220.160623][T15528] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  220.177710][T15525] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  220.184918][T15528] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  220.193658][T15525] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3856: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  220.203184][T15528] EXT4-fs (loop0): invalid journal inode
[  220.221570][T15525] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3856: couldn't read orphan inode 13 (err -117)
[  220.226506][T15528] EXT4-fs (loop0): can't get journal size
[  220.244676][T15528] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.3857: blocks 2-2 from inode overlap system zone
[  220.258763][T15528] EXT4-fs (loop0): failed to initialize system zone (-117)
[  220.258877][T15525] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  220.266016][T15528] EXT4-fs (loop0): mount failed
[  220.278093][T15525] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  220.372598][T15538] loop3: detected capacity change from 0 to 1024
[  220.382198][T15538] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  220.393211][T15538] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  220.403607][T15538] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  220.415816][T15538] EXT4-fs (loop3): invalid journal inode
[  220.421623][T15541] loop0: detected capacity change from 0 to 512
[  220.422114][T15538] EXT4-fs (loop3): can't get journal size
[  220.436492][T15538] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.3859: blocks 2-2 from inode overlap system zone
[  220.451247][T15538] EXT4-fs (loop3): failed to initialize system zone (-117)
[  220.451913][T15541] EXT4-fs mount: 84 callbacks suppressed
[  220.451930][T15541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  220.460684][T15538] EXT4-fs (loop3): mount failed
[  220.464463][T15541] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.533162][T15547] loop1: detected capacity change from 0 to 512
[  220.561766][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  220.577980][T15547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  220.617243][T15559] loop0: detected capacity change from 0 to 164
[  220.623057][T15563] loop4: detected capacity change from 0 to 512
[  220.632419][T15547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.645487][T15547] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.645766][T15563] EXT4-fs (loop4): orphan cleanup on readonly fs
[  220.664154][T15563] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  220.680696][T15563] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  220.688695][T15563] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3869: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  220.708397][T15563] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3869: couldn't read orphan inode 13 (err -117)
[  220.721020][T15563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  220.746301][T15563] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  220.747266][T15568] loop0: detected capacity change from 0 to 1024
[  220.763232][T15568] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  220.774242][T15568] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  220.785358][T15563] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2
[  220.785759][T15568] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  220.804971][T15567] 9pnet_rdma: rdma_create_trans (15567): problem binding to privport: 13
[  220.806996][T15568] EXT4-fs (loop0): invalid journal inode
[  220.831345][T15568] EXT4-fs (loop0): can't get journal size
[  220.837906][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.839578][T15568] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.3870: blocks 2-2 from inode overlap system zone
[  220.862371][T15568] EXT4-fs (loop0): failed to initialize system zone (-117)
[  220.869727][T15568] EXT4-fs (loop0): mount failed
[  220.914529][T15575] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3874'.
[  220.941980][T15579] loop3: detected capacity change from 0 to 512
[  220.960582][T15579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  220.984616][T15579] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.087501][T15593] loop5: detected capacity change from 0 to 164
[  221.101577][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  221.151597][T15595] 9pnet_rdma: rdma_create_trans (15595): problem binding to privport: 13
[  221.174598][T15600] loop0: detected capacity change from 0 to 1024
[  221.181318][T15600] EXT4-fs: Ignoring removed nobh option
[  221.186992][T15600] EXT4-fs: Ignoring removed bh option
[  221.207837][T15600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.226579][T15604] loop5: detected capacity change from 0 to 512
[  221.236305][T15604] EXT4-fs (loop5): orphan cleanup on readonly fs
[  221.243888][T15604] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  221.261301][T15604] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  221.281597][T13000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.294151][T15604] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.3883: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  221.321057][T15604] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3883: couldn't read orphan inode 13 (err -117)
[  221.335247][T15604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  221.350765][T15604] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  221.360998][T15604] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2
[  221.386296][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.127906][T15612] loop1: detected capacity change from 0 to 1024
[  222.141447][   T29] kauditd_printk_skb: 2232 callbacks suppressed
[  222.141472][   T29] audit: type=1326 audit(1740904514.561:66615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.193388][T15612] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  222.204449][T15612] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  222.238437][   T29] audit: type=1326 audit(1740904514.601:66616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.262255][   T29] audit: type=1326 audit(1740904514.601:66617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.285928][   T29] audit: type=1326 audit(1740904514.601:66618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.309523][   T29] audit: type=1326 audit(1740904514.601:66619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.333255][   T29] audit: type=1326 audit(1740904514.601:66620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.356855][   T29] audit: type=1326 audit(1740904514.601:66621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.369973][T15612] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  222.380445][   T29] audit: type=1326 audit(1740904514.601:66622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.414032][   T29] audit: type=1326 audit(1740904514.601:66623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.435520][T15612] EXT4-fs (loop1): invalid journal inode
[  222.437599][   T29] audit: type=1326 audit(1740904514.601:66624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15613 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe3bdbcd169 code=0x7ffc0000
[  222.443969][T15612] EXT4-fs (loop1): can't get journal size
[  222.482248][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.496101][T15612] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.3884: blocks 2-2 from inode overlap system zone
[  222.544566][T15612] EXT4-fs (loop1): failed to initialize system zone (-117)
[  222.565312][T15612] EXT4-fs (loop1): mount failed
[  222.613778][T15632] loop4: detected capacity change from 0 to 512
[  222.629656][T15632] EXT4-fs (loop4): orphan cleanup on readonly fs
[  222.636708][T15632] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  222.654629][T15632] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  222.662101][T15632] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3893: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  222.681226][T15632] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3893: couldn't read orphan inode 13 (err -117)
[  222.695253][T15632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  222.741970][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.772434][T15645] loop1: detected capacity change from 0 to 512
[  222.777599][T15651] loop4: detected capacity change from 0 to 512
[  222.779365][T15645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  222.813260][T15651] EXT4-fs (loop4): orphan cleanup on readonly fs
[  222.820994][T15645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.834905][T15645] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.849047][T15651] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  222.867262][T15651] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  222.883666][T15658] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3896'.
[  222.894489][T15651] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.3895: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  222.933049][T15651] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3895: couldn't read orphan inode 13 (err -117)
[  222.959785][T15651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  222.999575][T15651] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  223.018250][T15651] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2
[  223.074786][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.370133][T15678] loop5: detected capacity change from 0 to 512
[  223.399302][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.423942][T15678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.436643][T15678] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.452456][T15678] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3901: corrupted inode contents
[  223.468145][T15678] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.3901: mark_inode_dirty error
[  223.480460][T15678] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3901: corrupted inode contents
[  223.493072][T15678] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3901: mark_inode_dirty error
[  223.511878][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.602904][T13000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.618096][T15675] SELinux:  policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c
[  223.718081][T15675] SELinux: failed to load policy
[  223.741815][T15683] loop1: detected capacity change from 0 to 1024
[  223.805079][T15683] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  223.816069][T15683] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  223.873157][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3905'.
[  223.950887][T15683] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  224.047552][T15683] EXT4-fs (loop1): invalid journal inode
[  224.057037][T15683] EXT4-fs (loop1): can't get journal size
[  224.070465][T15683] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.3904: blocks 2-2 from inode overlap system zone
[  224.120518][T15683] EXT4-fs (loop1): failed to initialize system zone (-117)
[  224.145542][T15683] EXT4-fs (loop1): mount failed
[  224.175175][T15692] loop0: detected capacity change from 0 to 512
[  224.202163][T15692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  224.219090][T15692] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.266395][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  224.331477][T15701] loop3: detected capacity change from 0 to 512
[  224.347688][T15704] loop0: detected capacity change from 0 to 512
[  224.363732][T15701] EXT4-fs (loop3): orphan cleanup on readonly fs
[  224.375842][T15701] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  224.405715][T15701] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  224.416014][T15704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  224.465903][T15704] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.476719][T15701] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3911: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  224.701933][T15713] loop1: detected capacity change from 0 to 1024
[  224.712059][T15701] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3911: couldn't read orphan inode 13 (err -117)
[  224.736525][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  224.749819][T15713] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  224.760881][T15713] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  224.778907][T15701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  224.814538][T15715] loop0: detected capacity change from 0 to 512
[  224.826449][T15713] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  224.859734][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.871235][T15713] EXT4-fs (loop1): invalid journal inode
[  224.876970][T15713] EXT4-fs (loop1): can't get journal size
[  224.893375][T15715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  224.921003][T15713] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.3914: blocks 2-2 from inode overlap system zone
[  224.950589][T15715] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.981013][T15713] EXT4-fs (loop1): failed to initialize system zone (-117)
[  225.007189][T15713] EXT4-fs (loop1): mount failed
[  225.029682][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  225.104978][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3918'.
[  225.114069][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3918'.
[  225.155236][T15722] loop3: detected capacity change from 0 to 1764
[  225.171014][T15727] loop1: detected capacity change from 0 to 1024
[  225.180341][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.208535][T15722] netlink: 'syz.3.3917': attribute type 13 has an invalid length.
[  225.220792][T15722] gretap0: refused to change device tx_queue_len
[  225.235207][T15727] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  225.246175][T15727] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  225.258667][T15722] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  225.277348][T15727] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  225.294676][T15734] loop5: detected capacity change from 0 to 512
[  225.306937][T15736] loop0: detected capacity change from 0 to 512
[  225.314253][T15727] EXT4-fs (loop1): invalid journal inode
[  225.314338][T15727] EXT4-fs (loop1): can't get journal size
[  225.320303][T15727] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.3919: blocks 2-2 from inode overlap system zone
[  225.327513][T15739] IPv6: Can't replace route, no match found
[  225.327995][T15727] EXT4-fs (loop1): failed to initialize system zone (-117)
[  225.355195][T15727] EXT4-fs (loop1): mount failed
[  225.357909][T15734] EXT4-fs (loop5): orphan cleanup on readonly fs
[  225.380000][T15734] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  225.424065][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3925'.
[  225.433015][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3925'.
[  225.445558][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'.
[  225.455349][T15734] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  225.462408][T15734] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.3923: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  225.489040][T15734] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3923: couldn't read orphan inode 13 (err -117)
[  225.519703][T15734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  225.545470][T15734] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  225.562283][T15734] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2
[  225.584304][T15756] loop1: detected capacity change from 0 to 512
[  225.592132][T15757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3930'.
[  225.603380][T15756] EXT4-fs (loop1): orphan cleanup on readonly fs
[  225.611447][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.622434][T15756] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  225.638098][T15756] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  225.645531][T15756] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.3931: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  225.648329][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3932'.
[  225.693529][T15760] bond3: entered promiscuous mode
[  225.698703][T15760] bond3: entered allmulticast mode
[  225.702002][T15756] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3931: couldn't read orphan inode 13 (err -117)
[  225.715777][T15760] 8021q: adding VLAN 0 to HW filter on device bond3
[  225.718228][T15756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  225.777033][T15756] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  225.790497][T15756] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2
[  225.833046][T15772] loop4: detected capacity change from 0 to 1764
[  225.844627][T15777] loop5: detected capacity change from 0 to 164
[  225.858573][T15772] netlink: 'syz.4.3937': attribute type 13 has an invalid length.
[  225.868321][T15772] gretap0: refused to change device tx_queue_len
[  225.875555][T15772] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  225.893630][T13000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.940418][T15782] loop5: detected capacity change from 0 to 512
[  225.955930][T15782] EXT4-fs (loop5): orphan cleanup on readonly fs
[  225.962919][T15782] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  225.980595][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'.
[  225.989790][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3943'.
[  226.000789][T15782] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  226.008006][T15776] loop3: detected capacity change from 0 to 8192
[  226.022864][T15782] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.3942: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  226.072408][T15782] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3942: couldn't read orphan inode 13 (err -117)
[  226.094241][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'.
[  226.105078][T15782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  226.119969][T15794] bond3: entered promiscuous mode
[  226.125068][T15794] bond3: entered allmulticast mode
[  226.130763][T15794] 8021q: adding VLAN 0 to HW filter on device bond3
[  226.139887][T15782] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  226.165166][T15782] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2
[  226.241032][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.259652][T15806] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  226.268625][T15803] loop0: detected capacity change from 0 to 512
[  226.290725][T15803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  226.305662][T15803] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.373255][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  226.440175][T15835] loop5: detected capacity change from 0 to 512
[  226.469287][T15835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  226.482408][T15835] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.548394][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  226.559919][T15850] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  226.578708][T15852] loop3: detected capacity change from 0 to 512
[  226.597519][T15852] EXT4-fs (loop3): orphan cleanup on readonly fs
[  226.604429][T15852] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  226.622851][T15860] FAULT_INJECTION: forcing a failure.
[  226.622851][T15860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.636073][T15860] CPU: 1 UID: 0 PID: 15860 Comm: syz.0.3964 Tainted: G        W          6.14.0-rc4-syzkaller-00278-gece144f151ac #0
[  226.636139][T15860] Tainted: [W]=WARN
[  226.636148][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  226.636164][T15860] Call Trace:
[  226.636173][T15860]  <TASK>
[  226.636183][T15860]  dump_stack_lvl+0xf2/0x150
[  226.636218][T15860]  dump_stack+0x15/0x1a
[  226.636246][T15860]  should_fail_ex+0x24a/0x260
[  226.636306][T15860]  should_fail+0xb/0x10
[  226.636338][T15860]  should_fail_usercopy+0x1a/0x20
[  226.636372][T15860]  _copy_from_user+0x1c/0xa0
[  226.636391][T15860]  memdup_user+0x64/0xc0
[  226.636419][T15860]  bpf_prog_test_run_syscall+0x1c1/0x310
[  226.636498][T15860]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  226.636535][T15860]  bpf_prog_test_run+0x20f/0x3a0
[  226.636655][T15860]  __sys_bpf+0x400/0x7a0
[  226.636718][T15860]  __x64_sys_bpf+0x43/0x50
[  226.636749][T15860]  x64_sys_call+0x2914/0x2dc0
[  226.636775][T15860]  do_syscall_64+0xc9/0x1c0
[  226.636890][T15860]  ? clear_bhb_loop+0x55/0xb0
[  226.637002][T15860]  ? clear_bhb_loop+0x55/0xb0
[  226.637038][T15860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.637072][T15860] RIP: 0033:0x7fcbd3f5d169
[  226.637091][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.637172][T15860] RSP: 002b:00007fcbd25c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  226.637250][T15860] RAX: ffffffffffffffda RBX: 00007fcbd4175fa0 RCX: 00007fcbd3f5d169
[  226.637265][T15860] RDX: 0000000000000032 RSI: 0000400000000900 RDI: 000000000000000a
[  226.637279][T15860] RBP: 00007fcbd25c7090 R08: 0000000000000000 R09: 0000000000000000
[  226.637294][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.637316][T15860] R13: 0000000000000000 R14: 00007fcbd4175fa0 R15: 00007ffe779cd2c8
[  226.637337][T15860]  </TASK>
[  226.640787][T15852] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  226.648840][T15862] loop5: detected capacity change from 0 to 512
[  226.671840][T15852] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.3961: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  226.720460][T15862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  226.722615][T15852] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3961: couldn't read orphan inode 13 (err -117)
[  226.728511][T15862] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.731975][T15852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  226.912767][T15852] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  226.922649][T15852] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 2
[  226.941740][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.967603][ T9866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  227.224357][T15899] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  227.267803][   T29] kauditd_printk_skb: 753 callbacks suppressed
[  227.267823][   T29] audit: type=1326 audit(1740904519.700:67378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.282091][T15907] loop3: detected capacity change from 0 to 512
[  227.301386][T15905] loop4: detected capacity change from 0 to 164
[  227.310792][   T29] audit: type=1326 audit(1740904519.740:67379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.334540][   T29] audit: type=1326 audit(1740904519.740:67380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.358328][   T29] audit: type=1326 audit(1740904519.740:67381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.382037][   T29] audit: type=1326 audit(1740904519.740:67382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.405881][   T29] audit: type=1326 audit(1740904519.740:67383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.409727][T15907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  227.429394][   T29] audit: type=1326 audit(1740904519.740:67384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.429431][   T29] audit: type=1326 audit(1740904519.740:67385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.443346][T15907] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.465621][   T29] audit: type=1326 audit(1740904519.740:67386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.523660][   T29] audit: type=1326 audit(1740904519.740:67387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15904 comm="syz.4.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f28c9d169 code=0x7ffc0000
[  227.560728][T15911] IPv6: Can't replace route, no match found
[  227.593047][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  227.606620][T11656] ==================================================================
[  227.614744][T11656] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs
[  227.622500][T11656] 
[  227.624934][T11656] write to 0xffff888237d2a928 of 1 bytes by task 15915 on cpu 1:
[  227.632685][T11656]  folios_put_refs+0x26d/0x2b0
[  227.637470][T11656]  folio_batch_move_lru+0x202/0x230
[  227.642686][T11656]  folio_add_lru+0x145/0x1f0
[  227.647288][T11656]  shmem_get_folio_gfp+0x7d6/0xd90
[  227.652423][T11656]  shmem_write_begin+0xa2/0x180
[  227.657283][T11656]  generic_perform_write+0x1a8/0x4a0
[  227.662579][T11656]  shmem_file_write_iter+0xc2/0xe0
[  227.667705][T11656]  vfs_write+0x77b/0x920
[  227.672002][T11656]  ksys_write+0xe8/0x1b0
[  227.676268][T11656]  __x64_sys_write+0x42/0x50
[  227.680874][T11656]  x64_sys_call+0x287e/0x2dc0
[  227.685569][T11656]  do_syscall_64+0xc9/0x1c0
[  227.690103][T11656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.696014][T11656] 
[  227.698341][T11656] read to 0xffff888237d2a928 of 1 bytes by task 11656 on cpu 0:
[  227.705971][T11656]  __lru_add_drain_all+0x136/0x3f0
[  227.711092][T11656]  lru_add_drain_all+0x10/0x20
[  227.715863][T11656]  invalidate_bdev+0x47/0x70
[  227.720465][T11656]  ext4_put_super+0x571/0x810
[  227.725165][T11656]  generic_shutdown_super+0xe5/0x220
[  227.730462][T11656]  kill_block_super+0x2a/0x70
[  227.735154][T11656]  ext4_kill_sb+0x44/0x80
[  227.739496][T11656]  deactivate_locked_super+0x7d/0x1c0
[  227.744876][T11656]  deactivate_super+0x9f/0xb0
[  227.749560][T11656]  cleanup_mnt+0x268/0x2e0
[  227.753982][T11656]  __cleanup_mnt+0x19/0x20
[  227.758402][T11656]  task_work_run+0x13a/0x1a0
[  227.763012][T11656]  syscall_exit_to_user_mode+0xa8/0x120
[  227.768573][T11656]  do_syscall_64+0xd6/0x1c0
[  227.773098][T11656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.779004][T11656] 
[  227.781325][T11656] value changed: 0x1f -> 0x02
[  227.785995][T11656] 
[  227.788315][T11656] Reported by Kernel Concurrency Sanitizer on:
[  227.794468][T11656] CPU: 0 UID: 0 PID: 11656 Comm: syz-executor Tainted: G        W          6.14.0-rc4-syzkaller-00278-gece144f151ac #0
[  227.806889][T11656] Tainted: [W]=WARN
[  227.810689][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  227.820750][T11656] ==================================================================
[  227.833278][T15915] loop4: detected capacity change from 0 to 512
[  227.858873][T15915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  227.873014][T15915] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.916809][T15918] loop0: detected capacity change from 0 to 512
[  227.924187][T15918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  227.936523][T15918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.937751][T12692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  227.949414][T15918] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.511916][T13232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.