last executing test programs:

52.765108282s ago: executing program 4 (id=242):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0009070000000000000000de3f0005001a"], 0x38}}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x81010000000000, 0x0, 0x0, 0x2)

52.044609883s ago: executing program 4 (id=244):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=t'])

51.970858864s ago: executing program 4 (id=245):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005700000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000002080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="91ec976dac04aab3abdd7b808fe561e1d97da532ae2428667ab41c4a83d8fef5f580c5a52d41945d3a528b442d413b442630d0128605594205a71d0856b50ad20a746d5d5e3c53bdbe0b16c59540c02a41ad0e9b201fd544ea4b101b45edc65d352561b3dada59704ad83a44d0c5c4573bd135ae65522fec4a13", @ANYRESOCT=r2, @ANYRES8, @ANYRES8, @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYRESOCT=r2], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00')
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x40}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r13=>0x0})
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r10, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

51.876447586s ago: executing program 4 (id=248):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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")
r1 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0)
fallocate(r1, 0x3, 0x0, 0x2328)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x1}, 0x9})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f00000004c0)=[{0x0, 0x2, 0x8, 0x800}, {0x2, 0xb, 0x4, 0x9}]})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r3, 0x0, 0x4, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='mm_compaction_try_to_compact_pages\x00', r4, 0x0, 0x1}, 0xffffffffffffffa8)
mkdir(&(0x7f0000000400)='./file0\x00', 0x31d)
mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=rdma'])
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0xfffffffffffffffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)

50.946404901s ago: executing program 4 (id=254):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x8}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000c40)={0x38, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0)

50.39969798s ago: executing program 4 (id=258):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
io_setup(0x8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
unshare(0x62040200)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa00410, &(0x7f0000000a40)={[{@nodiscard}, {}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@discard}]}, 0x5, 0x591, &(0x7f0000000f80)="$eJzs3V1rFFcfAPD/bBKNL89jBJHaiyJ4UYt1Y5LWFyjUXpZWKrT3dknWINm4kt2ISYXqRb3pTZFCKRVKP0Dveyn9Av0UQitIkdBSpJAyu7PJmuzmzdVd3d8PRs+Zmew5Z8/8Z8+ZmWUD6FtH039yEUci4psk4kDTtsHINh6t77f0+OZkuiSxvPzpn0kk2brG/kn2/74s81pE/PpVxIlcff1Q02tXFhZnCqVScS7Lj1Znr41WFhZPXpktTBeni1fHJybOvjs8fu7M6Y619a2Lf3//yf0Ph78+tvTdzw8P3k3ifOzPtjW34xncas4cLfybpYbi/JodxzpQWC9Jul0BdmQgi/M0No/EgRjIoh549X0ZEctAn0rEP/SpxjigMbfv0Dz4pfHog/oEaH37B+vXRmK4Njfau5Q8NTNK57sjHSg/LeOXP+7dTZfY+DrEnk3yANty63ZEnBocXH/+S7Lz386dql083tjaMvrt8we66X46/nm71fgntzL+iRbjn30tYncnNo//3MOnsh2+0ZCO/95rOf5dOXWNDGS5/9XGfEPJ5Sul4qmI+H9EHI+h3Wl+o/s5Z5ceLLfb1jz+S5e0/MZYMKvHw8Hdtcv0K6YK1cKztXrVo9sRr7cc/yYr/Z+06P/0/bi44SuvdtTh4r032u21efufr+WfIt5s2f+r9U/a3p+cGD935vRo7XgYbRwV6/115/Bv7crvdvvT/t+7cftHkub7tZXtl/Hj8JNiu21bPP6fkh7/u5LPauld2bobhWp1bixiV/Lx+vXjq3/byDf2T9t//NjG579Wx386+fp8i+2/c+hO2117of+nttX/2088+OiLH9qVv7X+f6eWOp6tWXP+e7LmUkbNVivYobcRAAAAAAAAekIuIvZHksuvpHO5fL7+fMeh2JsrlSvVE5fL81enovZd2ZEYyjXudB+o3YKtPw8xlj0P23g+YnxNfiIiDkbEtwN7avn8ZLk01e3GAwAAAAAAAAAAAAAAAAAAQI/Y1+b7/6nfB7pdO+C5q/2wwe5u1wLohk1/8r8Tv/QE9KRN4x94ZYl/6F/iH/qX+If+Jf6hf4l/6F+t49/TP9APfP4DAAAAAAAAAAAAAAAAAAAAAAAAAABAR128cCFdlpce35xM81PXF+ZnytdPThUrM/nZ+cn8ZHnuWn66XJ4uFfOT5dnNXq9ULl8bG4/5G6PVYqU6WllYvDRbnr9avXRltjBdvFQceiGtAgAAAAAAAAAAAAAAAAAAgJdLZWFxplAqFedecGIwulDoDhPvR09U43k2sG5Hfz64ftM/EdEL7ZJ4hkSXT0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OS/AAAA//8Umzy+")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r5, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r6, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)

50.3763239s ago: executing program 32 (id=258):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
io_setup(0x8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
unshare(0x62040200)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa00410, &(0x7f0000000a40)={[{@nodiscard}, {}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@discard}]}, 0x5, 0x591, &(0x7f0000000f80)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r5, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r6, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)

3.328329926s ago: executing program 1 (id=697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

3.266355327s ago: executing program 0 (id=699):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r5, r5, 0x0, 0xe3aa6ea)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
fallocate(r6, 0x1, 0xfff, 0xfff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0)

3.020571531s ago: executing program 1 (id=701):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, 0x0, &(0x7f00000005c0), 0x4, r1}, 0x38)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x6}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r4 = gettid()
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
read$ptp(r5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r9 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x3, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000180)='cpu>=0!|!')

2.356626892s ago: executing program 5 (id=708):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

2.336734932s ago: executing program 0 (id=709):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18)
close(r2)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='mpol=prefer=relative'])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r5=>0x0, 0x80, 0x40, 0x2, 0x6, {{0x3b, 0x4, 0x3, 0x3, 0xec, 0x68, 0x0, 0x8, 0x4, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x14, 0x59, 0x1, 0xc, [{@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x368}]}, @generic={0x7, 0x6, "aefaa022"}, @timestamp_prespec={0x44, 0x34, 0xe9, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40fd}, {@local, 0x6}, {@rand_addr=0x64010101, 0xeb}, {@broadcast, 0x57bd}, {@rand_addr=0x64010101, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd3d0}]}, @lsrr={0x83, 0x1f, 0x3c, [@loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, @local, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x9, 0x3, [{0x2, 0x3, "c4"}]}, @generic={0x86, 0x12, "b060ea5c3d88de305c2280f68d951c17"}, @noop, @timestamp_addr={0x44, 0x4c, 0x91, 0x1, 0x3, [{@private=0xa010101, 0x3ff}, {@private=0xa010101, 0x8}, {@remote, 0xa00}, {@multicast1, 0x4}, {@empty, 0x7}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x5}, {@broadcast, 0x400}, {@rand_addr=0x64010100, 0x80000000}]}, @generic={0x82, 0x2}]}}}}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000480)=""/50, 0x32, <r6=>0x0, &(0x7f00000004c0)=""/5, 0x5}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x2, 0x5, 0x9, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x7, 0x94, &(0x7f0000000180)=""/148, 0x40f00, 0x70, '\x00', r5, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x1, 0x4}, 0x10, r6, r1, 0x5, &(0x7f0000000640)=[r0, r0, r7, r0, r8, r0, r0], &(0x7f0000000780)=[{0x4, 0x5, 0x7, 0xc}, {0x2, 0x3, 0xe, 0x9}, {0x2, 0x3, 0x9, 0x7}, {0x1, 0x3, 0xf, 0x6}, {0x5, 0x5, 0xf, 0x2}], 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18)
epoll_create1(0x80000)

2.163961735s ago: executing program 5 (id=712):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x2000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

2.091786676s ago: executing program 0 (id=713):
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x32, 0x5, 0x8, {0xc, @esp_ip4_spec={@multicast2, @private=0xa010100, 0x40}, {0x0, @link_local, 0x5, 0x0, [0x80000000, 0x394435ef]}, @hdata="514b3e1f614dcef15a399383313ea13ab258ce5aed9eaf4f1ddeb423dc9b2d7952fd1be2b0f3e3097037b91739d1cc3133eb11be", {0x0, @random="e78ce8a2c8e4", 0x1, 0x6, [0xf, 0xfffffff9]}, 0x1000, 0x7}}})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69})
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="726f6f74636f6e74657874bd"])
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='mm_vmscan_lru_isolate\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
symlink(&(0x7f0000000000)='.\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
umount2(&(0x7f00000002c0)='./file0\x00', 0x2)

1.983990778s ago: executing program 2 (id=714):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000003c0))
r3 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82401802}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x19, 0x8, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x80, 0x6, 0xfc, 0x1, 0xfd, 0x3}, [@RTA_NH_ID={0x8, 0x1e, 0xf45}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000002)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x40}}, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)

1.983051068s ago: executing program 5 (id=715):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000, 0x18, 0x0, 0x0, 0x8, 0x20c300e2})

1.874698139s ago: executing program 1 (id=717):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x44084)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x1000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x84040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x5, 0x50}, 0xa002, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x381a41, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.797145541s ago: executing program 5 (id=718):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$kcm(0xa, 0x3, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x5)
r3 = socket(0x28, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18)
r6 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r8, 0x3, 0x0, @void}, 0x10)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x25a, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r6, 0x3)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x0, 0x71)
mkdirat(r9, &(0x7f0000000080)='./file0\x00', 0x1c)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x24)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)

1.749413642s ago: executing program 0 (id=719):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x7}, 0x18)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast1={0xff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
get_robust_list(0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f00000000c0))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1})
close(r4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000700250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)
r7 = eventfd2(0xfffffff9, 0x80000)
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c)

1.679736273s ago: executing program 5 (id=720):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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")
r1 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x0)
fallocate(r1, 0x3, 0x0, 0x2328)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x1}, 0x9})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f00000004c0)=[{0x0, 0x2, 0x8, 0x800}, {0x2, 0xb, 0x4, 0x9}]})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r3, 0x0, 0x4, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='mm_compaction_try_to_compact_pages\x00', r4, 0x0, 0x1}, 0xffffffffffffffa8)
mkdir(&(0x7f0000000400)='./file0\x00', 0x31d)
mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=rdma'])
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0xfffffffffffffffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)

1.592441044s ago: executing program 2 (id=721):
unshare(0x20060400)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x100010, 0x0, 0x0, 0x6, 0x10000, 0x0, 0x4}, 0x0, 0x10007, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00000000000000000300000000000000080001"], 0x20}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='xprtrdma_post_send_err\x00', r4, 0x0, 0x400000000000000}, 0x18)
io_setup(0x6, &(0x7f0000001000)=<r5=>0x0)
io_getevents(r5, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700})
time(0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000040)={0x3})
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="c130d064c2f6fdf9f55587f5f6968a8a4a53fc028a0da01367ac765266ef06663f847287d7f6ba25ba067429c18a5e0198e99a4766111e6b8e104e54af1b343a38192a42c480eaa7b2b4423f78dc02556684ef010a2c6f099a5125e1a8b9cbcc", @ANYRES16=r0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000edff0000000000000086140000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095f40f26aadc0c5eac908cb8ae5dc16f73dda1759dc68cef28d125d98e374103dc7373f155a6fb10aba0"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}})
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000700)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000800)=ANY=[@ANYRES16=r3], 0x57)
syz_open_dev$tty1(0xc, 0x4, 0x3)

781.967977ms ago: executing program 3 (id=723):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], <r0=>0x0, 0x19, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x407, 0x2000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xb2a1, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x6, 0x7fff, 0x9, 0x7}, {0x3, 0xde5, 0x1, 0xbd}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x800}]}}]}}]}, 0xa4}}, 0x24040084)
sendfile(r1, r2, 0x0, 0xfffc80)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

748.560838ms ago: executing program 0 (id=724):
r0 = syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r7, @ANYRESOCT=r0, @ANYRES8=0x0, @ANYRESHEX=r6], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00'}, 0x10)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00', @ANYRES16, @ANYRES32=r12, @ANYBLOB='\b\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000009000000040000003500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000eb670400000000cee4b452080306d170876291784fd8328fef30db0423ec436605e36f2b1bfe46b5e223046763c7a64cf3cf4f8d08eeb37d62954308cef347f000db319905bc5c722cf5e8f631560fd2bb2278dbe5aa97399065471e033d35a753e4b0817fea47b9879f0ab8330ab06abe7a107d14721b99bd78e8970a7a22847517c522d32b19d40b34f4d9d9f52b4702ae3348ecd7e843c246552354fe48880560b5acef102d28570cf857b41f11ec2a163fa385734d0921949bfa85f8cb"], 0x48)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5)
setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0)

651.528589ms ago: executing program 2 (id=725):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="07000000040064eb22756ccef5a852880000000100000100000028a340f69be300cb034f90557c308b0cd70f3a1543056a49b0ff8fe144dab8940e7daaac863c6de82fb61666641fd91852e671d42b49ccb21b9c9ab729755abf759c0abb2aacde62076e41a3a2aaf5a88437d945acfec8285fcee887"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007910a800000000ee54000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20080e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x504, &(0x7f0000000f40)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
r5 = io_uring_setup(0x53fc, &(0x7f0000000200)={0x0, 0x23d4, 0x0, 0xfffffffc, 0x83, 0x0, r3})
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0)
creat(0x0, 0x89)
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)

633.22644ms ago: executing program 5 (id=726):
mkdir(&(0x7f00000002c0)='./file1\x00', 0x8)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x9, 0x10080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x5, 0x10, 0x9, 0x64, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x8000, 0x1, 0x2, 0x101}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000096, 0x0, 0x52, 0x10, &(0x7f0000000040), &(0x7f00000000c0), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = getuid()
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRESDEC, @ANYRESHEX], 0x1, 0x536, &(0x7f0000000400)="$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")
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x4e20, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, r7}, {0x1, 0xf1, 0x7, 0x8000000000000000, 0x4, 0x3, 0x2, 0xffffffffffffff00}, {0x66, 0xffffffffffffffff, 0x9, 0x8001}, 0x2, 0x6e6bc0, 0xbce683692a0cc6c0, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d3, 0x32}, 0xa, @in=@multicast1, 0x3504, 0x6, 0x3, 0x80, 0xfbf, 0x0, 0x3}}, 0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000001b40)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="080029bd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0400028008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="5801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r3, @ANYBLOB="0c0202803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f000008000600", @ANYRES32=r3, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r5, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040002000140fd7e0000060008b4000080000500820142e0ffff0c0002010200000005000510ff00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000080000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff030000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3002028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000180000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001405000008", @ANYRES32=r6, @ANYBLOB="340102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e5000000080006005c22e4a36390236db4f8441f4e989f5c4759eccfab45d620358be63de59bf536684c438eacd60b79ceaa63c96c09a433382984972f3d84b1af696b4c0200a584e98c7885f5b94b249e18c3000000f411bf20caba0f42061cde20652068a13baa90ee0a8b041103f8cc796bae93b25e99b01d410923", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffff0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="b40102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006d060073745f72656a6f69010000000000230000000000000000000000000005000300030000000800040000000000"], 0xc0c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0)
timerfd_gettime(r10, &(0x7f0000000280))
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r11 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r11, r11, 0x0, 0x4800000009)

580.560791ms ago: executing program 0 (id=727):
r0 = memfd_secret(0x80000)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x1e, 0x0, &(0x7f00000002c0))
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r4, 0x0, 0x5}, 0x18)
personality(0xfe47fef9f5ff7379)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="69ea993c95365ffea794d7ef0f308dc867e13c86ed5138af212b2dcaf8ba27c82cc746aec425b9ddc9827d9d0ffd91f02d95f6b711b5804695f47e1cb1a99a63ab873ad1a3f10fe20590164278df912d59774968162da745abd91eaad896ef33bc3e15eedef63a1779abdb5a6c46afc71fd0c9d4578d2a2a3cd7527022c3499423276b6c9cbd692a72b9de3e95ea1e67ba5fd21e514e3c9bad9c79cd6c4873406a715348c7cda8ffa979909323a863aa17d5c0f43b9e3ff52348541edd8361ff", @ANYRES16=r6, @ANYBLOB="000828bd7000fedbdf250100000008000200000000000800020008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x48090)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='percpu_destroy_chunk\x00', r8}, 0x18)
gettid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0)

562.741901ms ago: executing program 1 (id=728):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3dc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)

517.465872ms ago: executing program 1 (id=729):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000, 0x18, 0x0, 0x0, 0x8, 0x20c300e2})

478.634282ms ago: executing program 2 (id=730):
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

458.917403ms ago: executing program 3 (id=731):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000003c0))
r3 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82401802}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x19, 0x8, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x80, 0x6, 0xfc, 0x1, 0xfd, 0x3}, [@RTA_NH_ID={0x8, 0x1e, 0xf45}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000002)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x40}}, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)

406.897124ms ago: executing program 1 (id=732):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x855b, 0x1, 0xb, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6a040000)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
creat(&(0x7f00000005c0)='./file1\x00', 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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")

406.363474ms ago: executing program 2 (id=733):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x2000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

267.676876ms ago: executing program 3 (id=734):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
unshare(0x20000600)

234.447086ms ago: executing program 3 (id=735):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 7)

233.004906ms ago: executing program 2 (id=736):
mkdir(&(0x7f00000002c0)='./file1\x00', 0x8)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x9, 0x10080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6_vti0\x00', <r5=>0x0, 0x4, 0x5, 0x10, 0x9, 0x64, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2, 0x8000, 0x1, 0x2, 0x101}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000096, 0x0, 0x52, 0x10, &(0x7f0000000040), &(0x7f00000000c0), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r9 = getuid()
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r9, @ANYRESDEC, @ANYRESHEX], 0x1, 0x536, &(0x7f0000000400)="$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")
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x4e20, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, r9}, {0x1, 0xf1, 0x7, 0x8000000000000000, 0x4, 0x3, 0x2, 0xffffffffffffff00}, {0x66, 0xffffffffffffffff, 0x9, 0x8001}, 0x2, 0x6e6bc0, 0xbce683692a0cc6c0, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d3, 0x32}, 0xa, @in=@multicast1, 0x3504, 0x6, 0x3, 0x80, 0xfbf, 0x0, 0x3}}, 0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000001b40)=ANY=[@ANYRES64=r4, @ANYRES16=0x0, @ANYBLOB="080029bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0400028008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="5801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r5, @ANYBLOB="0c0202803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f000008000600", @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r7, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040002000140fd7e0000060008b4000080000500820142e0ffff0c0002010200000005000510ff00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000080000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff030000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3002028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000180000008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001405000008000100", @ANYRES32=r8, @ANYBLOB="340102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e5000000080006005c22e4a36390236db4f8441f4e989f5c4759eccfab45d620358be63de59bf536684c438eacd60b79ceaa63c96c09a433382984972f3d84b1af696b4c0200a584e98c7885f5b94b249e18c3000000f411bf20caba0f42061cde20652068a13baa90ee0a8b041103f8cc796bae93b25e99b01d410923", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffff0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="b40102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006d060073745f72656a6f69010000000000230000000000000000000000000005000300030000000800040000000000"], 0xc0c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r12 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0)
timerfd_gettime(r12, &(0x7f0000000280))
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r13 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r13, r13, 0x0, 0x4800000009)

175.534797ms ago: executing program 3 (id=737):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

0s ago: executing program 3 (id=738):
r0 = syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r7, @ANYRESOCT=r0, @ANYRES8=0x0, @ANYRESHEX=r6], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00'}, 0x10)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00', @ANYRES16, @ANYRES32=r12, @ANYBLOB='\b\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000009000000040000003500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000eb670400000000cee4b452080306d170876291784fd8328fef30db0423ec436605e36f2b1bfe46b5e223046763c7a64cf3cf4f8d08eeb37d62954308cef347f000db319905bc5c722cf5e8f631560fd2bb2278dbe5aa97399065471e033d35a753e4b0817fea47b9879f0ab8330ab06abe7a107d14721b99bd78e8970a7a22847517c522d32b19d40b34f4d9d9f52b4702ae3348ecd7e843c246552354fe48880560b5acef102d28570cf857b41f11ec2a163fa385734d0921949bfa85f8cb"], 0x48)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5)
setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0)

kernel console output (not intermixed with test programs):

2][ T4998] loop5: detected capacity change from 0 to 512
[   80.667530][ T4999] loop1: detected capacity change from 0 to 512
[   80.676749][   T29] audit: type=1326 audit(1753613228.151:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.700213][   T29] audit: type=1326 audit(1753613228.151:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.723904][   T29] audit: type=1326 audit(1753613228.151:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.738594][ T5001] loop3: detected capacity change from 0 to 512
[   80.747273][   T29] audit: type=1326 audit(1753613228.151:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.777128][   T29] audit: type=1326 audit(1753613228.151:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.797110][ T5001] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   80.800644][   T29] audit: type=1326 audit(1753613228.151:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.832211][   T29] audit: type=1326 audit(1753613228.151:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.837621][ T5001] EXT4-fs (loop3): invalid journal inode
[   80.855596][   T29] audit: type=1326 audit(1753613228.151:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.884750][   T29] audit: type=1326 audit(1753613228.151:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.1.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[   80.920765][ T5001] EXT4-fs (loop3): can't get journal size
[   80.927394][ T4998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.929723][ T4999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.952729][ T4999] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.969093][ T4998] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.986090][ T5001] EXT4-fs (loop3): 1 truncate cleaned up
[   80.986567][ T4999] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   81.006701][ T5001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.028819][ T4998] Cannot find add_set index 0 as target
[   81.030151][ T5001] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.346: bg 0: block 255: padding at end of block bitmap is not set
[   81.053702][ T5012] tmpfs: Unknown parameter 'rootcontext½'
[   81.055964][ T4999] EXT4-fs (loop1): Remounting filesystem read-only
[   81.066223][ T5012] loop0: detected capacity change from 0 to 1024
[   81.071611][ T5008] netlink: '+}[@': attribute type 21 has an invalid length.
[   81.083864][ T5001] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   81.085718][ T5012] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   81.116587][ T5012] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.352: lblock 1 mapped to illegal pblock 1 (length 1)
[   81.133569][ T4495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.135004][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.156268][ T5012] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.352: Failed to acquire dquot type 0
[   81.168831][ T5012] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.352: Freeing blocks not in datazone - block = 0, count = 4096
[   81.196979][ T5012] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.352: Invalid inode bitmap blk 0 in block_group 0
[   81.213208][ T5012] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   81.226987][ T5021] loop5: detected capacity change from 0 to 1024
[   81.233724][ T4067] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   81.236303][ T5012] EXT4-fs (loop0): 1 orphan inode deleted
[   81.256041][ T5021] EXT4-fs: Ignoring removed nobh option
[   81.261654][ T5021] EXT4-fs: inline encryption not supported
[   81.263131][ T4067] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0
[   81.284497][ T5012] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.352: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   81.317590][ T5021] netlink: 'syz.5.354': attribute type 1 has an invalid length.
[   81.330016][ T5020] loop1: detected capacity change from 0 to 2048
[   81.392577][ T5026] netlink: '+}[@': attribute type 21 has an invalid length.
[   81.843274][ T5042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.126010][ T5047] Cannot find add_set index 0 as target
[   82.200029][ T5050] loop1: detected capacity change from 0 to 164
[   82.209391][    C0] hrtimer: interrupt took 27144 ns
[   82.223282][ T5052] netlink: 100 bytes leftover after parsing attributes in process `syz.2.363'.
[   82.379803][ T5050] rock: directory entry would overflow storage
[   82.386077][ T5050] rock: sig=0x66, size=4, remaining=3
[   82.432533][ T5055] loop0: detected capacity change from 0 to 512
[   82.452155][ T5050] rock: directory entry would overflow storage
[   82.458605][ T5050] rock: sig=0x66, size=4, remaining=3
[   82.509392][ T5055] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.540717][ T5061] rock: directory entry would overflow storage
[   82.540728][ T5061] rock: sig=0x66, size=4, remaining=3
[   82.546748][ T5061] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   82.596545][ T5055] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   82.603160][ T5055] EXT4-fs (loop0): Remounting filesystem read-only
[   82.614094][ T5052] loop2: detected capacity change from 0 to 2048
[   82.725284][ T5070] loop5: detected capacity change from 0 to 1024
[   82.732378][ T5070] EXT4-fs: Ignoring removed nobh option
[   82.738042][ T5070] EXT4-fs: inline encryption not supported
[   82.783636][ T5077] loop1: detected capacity change from 0 to 512
[   82.796759][ T5070] netlink: 'syz.5.368': attribute type 1 has an invalid length.
[   82.829553][ T5077] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   82.849612][ T5078] loop3: detected capacity change from 0 to 2048
[   82.892887][ T5077] EXT4-fs (loop1): invalid journal inode
[   82.923480][ T5077] EXT4-fs (loop1): can't get journal size
[   82.936938][ T5077] EXT4-fs (loop1): 1 truncate cleaned up
[   82.952699][ T5077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.369: bg 0: block 255: padding at end of block bitmap is not set
[   82.988658][ T5077] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   83.084858][ T5087] loop5: detected capacity change from 0 to 2048
[   83.966691][ T5100] netlink: 'syz.0.376': attribute type 21 has an invalid length.
[   84.003526][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'.
[   84.156525][ T5125] loop0: detected capacity change from 0 to 512
[   84.174465][ T5125] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   84.185155][ T5129] loop5: detected capacity change from 0 to 512
[   84.196781][ T5125] EXT4-fs (loop0): invalid journal inode
[   84.217222][ T5125] EXT4-fs (loop0): can't get journal size
[   84.242718][ T5129] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.379: Failed to acquire dquot type 1
[   84.252218][ T5129] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.379: corrupted inode contents
[   84.252601][ T5125] EXT4-fs (loop0): 1 truncate cleaned up
[   84.254149][ T5129] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.379: mark_inode_dirty error
[   84.254291][ T5129] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.379: corrupted inode contents
[   84.254533][ T5129] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.379: mark_inode_dirty error
[   84.254700][ T5129] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.379: corrupted inode contents
[   84.254909][ T5129] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[   84.255056][ T5129] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.379: corrupted inode contents
[   84.255175][ T5129] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.379: mark_inode_dirty error
[   84.255355][ T5129] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[   84.257536][ T5129] EXT4-fs (loop5): 1 truncate cleaned up
[   84.258212][ T5129] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.259831][ T5125] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.381: bg 0: block 255: padding at end of block bitmap is not set
[   84.260075][ T5125] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   84.433852][ T5147] loop5: detected capacity change from 0 to 1024
[   84.434531][ T5147] EXT4-fs: Ignoring removed orlov option
[   84.434595][ T5147] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.435135][ T5147] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   84.462533][ T5149] loop2: detected capacity change from 0 to 512
[   84.463267][ T5149] ext3: Unknown parameter 'fowner>00000000000000000000'
[   84.952652][ T5165] loop1: detected capacity change from 0 to 512
[   85.049673][ T5165] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.104589][ T5172] tmpfs: Unknown parameter 'rootcontext½'
[   85.112546][ T5165] Cannot find add_set index 0 as target
[   85.141541][ T5172] loop3: detected capacity change from 0 to 1024
[   85.179751][ T5172] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   85.199746][ T5147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.385'.
[   85.285046][ T5188] loop0: detected capacity change from 0 to 2048
[   85.299946][ T5184] loop2: detected capacity change from 0 to 2048
[   85.309576][ T5172] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.387: lblock 1 mapped to illegal pblock 1 (length 1)
[   85.442453][ T5172] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.387: Failed to acquire dquot type 0
[   85.470296][ T5172] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.387: Freeing blocks not in datazone - block = 0, count = 4096
[   85.502404][ T5172] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.387: Invalid inode bitmap blk 0 in block_group 0
[   85.706921][ T5208] loop5: detected capacity change from 0 to 1024
[   85.755965][ T5172] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   85.824271][ T5208] EXT4-fs: Ignoring removed oldalloc option
[   85.908949][ T5172] EXT4-fs (loop3): 1 orphan inode deleted
[   85.984707][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'.
[   85.995780][   T29] kauditd_printk_skb: 130 callbacks suppressed
[   85.995793][   T29] audit: type=1400 audit(1753613233.511:1187): avc:  denied  { append } for  pid=5207 comm="syz.5.392" path="/19/file1/memory.events.local" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   86.099414][ T5172] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.387: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   86.123529][ T4076] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1)
[   86.129536][ T5208] netlink: 'syz.5.392': attribute type 9 has an invalid length.
[   86.137950][ T4076] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   86.145522][ T5208] netlink: 'syz.5.392': attribute type 6 has an invalid length.
[   86.154002][ T4076] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0
[   86.173239][ T5208] netlink: 'syz.5.392': attribute type 7 has an invalid length.
[   86.180972][ T5208] netlink: 'syz.5.392': attribute type 8 has an invalid length.
[   86.267678][   T29] audit: type=1400 audit(1753613233.801:1188): avc:  denied  { lock } for  pid=5207 comm="syz.5.392" path="/19/file1/blkio.bfq.dequeue" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   86.317015][ T5219] loop1: detected capacity change from 0 to 2048
[   86.429311][   T29] audit: type=1400 audit(1753613233.831:1189): avc:  denied  { ioctl } for  pid=5207 comm="syz.5.392" path="/19/file1/memory.events.local" dev="loop5" ino=18 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   86.535467][   T29] audit: type=1326 audit(1753613234.061:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   86.694550][ T5232] loop3: detected capacity change from 0 to 512
[   86.777527][ T5239] loop5: detected capacity change from 0 to 512
[   86.801972][   T29] audit: type=1326 audit(1753613234.091:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   86.825445][   T29] audit: type=1326 audit(1753613234.091:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   86.848798][   T29] audit: type=1326 audit(1753613234.091:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   86.872136][   T29] audit: type=1326 audit(1753613234.091:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   86.895474][   T29] audit: type=1326 audit(1753613234.091:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.5.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   87.007907][ T5244] loop1: detected capacity change from 0 to 1024
[   87.016449][ T5244] EXT4-fs: Ignoring removed nobh option
[   87.022095][ T5244] EXT4-fs: inline encryption not supported
[   87.054890][ T5232] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.066068][ T5239] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.106707][ T5239] Cannot find add_set index 0 as target
[   87.121906][ T5232] Cannot find add_set index 0 as target
[   87.129495][ T5244] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.401: Allocating blocks 385-513 which overlap fs metadata
[   87.151864][ T5239] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   87.153994][ T5232] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   87.193032][ T5258] loop2: detected capacity change from 0 to 1024
[   87.199782][ T5239] EXT4-fs (loop5): Remounting filesystem read-only
[   87.210884][ T5232] EXT4-fs (loop3): Remounting filesystem read-only
[   87.217702][ T5259] EXT4-fs (loop1): pa ffff888106e7d850: logic 16, phys. 129, len 24
[   87.225773][ T5259] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   87.238687][ T5258] EXT4-fs: Ignoring removed orlov option
[   87.244385][ T5258] EXT4-fs: Ignoring removed mblk_io_submit option
[   87.253536][ T5258] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   87.303249][ T5244] netlink: 'syz.1.401': attribute type 1 has an invalid length.
[   87.327332][ T5268] loop5: detected capacity change from 0 to 2048
[   87.340229][ T5258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.402'.
[   87.349255][ T5262] loop0: detected capacity change from 0 to 2048
[   87.350309][ T5244] bond1: entered promiscuous mode
[   87.361227][ T5244] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.432314][ T5259] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.439700][ T5259] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   87.450286][ T5259] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   87.479272][ T5259] bond1: (slave wireguard0): making interface the new active one
[   87.487161][ T5259] wireguard0: entered promiscuous mode
[   87.514376][ T5259] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   87.531646][ T5281] loop3: detected capacity change from 0 to 2048
[   87.581812][ T5283] loop0: detected capacity change from 0 to 2048
[   88.616371][ T5296] loop2: detected capacity change from 0 to 2048
[   88.993840][ T5312] loop3: detected capacity change from 0 to 512
[   89.006953][ T5312] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   89.022613][ T5312] EXT4-fs (loop3): 1 truncate cleaned up
[   89.122698][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'.
[   89.150162][ T5334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.308397][ T5346] loop3: detected capacity change from 0 to 2048
[   89.333265][ T5348] loop2: detected capacity change from 0 to 1024
[   89.377096][ T5348] EXT4-fs: Ignoring removed orlov option
[   89.382918][ T5348] EXT4-fs: Ignoring removed mblk_io_submit option
[   89.453256][ T5348] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   89.519733][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[   89.581610][ T5373] loop2: detected capacity change from 0 to 1024
[   89.591755][ T5373] EXT4-fs: Ignoring removed nobh option
[   89.597530][ T5373] EXT4-fs: inline encryption not supported
[   89.618645][ T5376] loop3: detected capacity change from 0 to 2048
[   89.642535][ T5373] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[   89.705834][ T5373] bond3: entered promiscuous mode
[   89.711195][ T5373] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.727824][ T5380] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.744317][ T5380] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[   89.755011][ T5380] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[   89.767506][ T5380] bond3: (slave wireguard1): making interface the new active one
[   89.775329][ T5380] wireguard1: entered promiscuous mode
[   89.782971][ T5380] bond3: (slave wireguard1): Enslaving as an active interface with an up link
[   89.851396][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.885558][ T5382] 8021q: adding VLAN 0 to HW filter on device team0
[   89.906554][ T5382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.963932][ T5389] loop1: detected capacity change from 0 to 1024
[   89.986646][ T5389] EXT4-fs: Ignoring removed nobh option
[   89.992391][ T5389] EXT4-fs: inline encryption not supported
[   90.004405][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'.
[   90.122713][ T5396] loop2: detected capacity change from 0 to 512
[   90.129661][ T5396] ext3: Unknown parameter 'fowner>00000000000000000000'
[   90.162961][ T5398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.513962][ T5389] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.427: Allocating blocks 385-513 which overlap fs metadata
[   90.608125][ T5389] EXT4-fs (loop1): pa ffff888106dc05b0: logic 16, phys. 129, len 24
[   90.616232][ T5389] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   90.671814][ T5407] loop0: detected capacity change from 0 to 512
[   90.678267][ T5390] netlink: 'syz.1.427': attribute type 1 has an invalid length.
[   90.693879][ T5406] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.714526][ T5407] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.734020][ T5407] Cannot find add_set index 0 as target
[   90.743181][ T5390] bond2: entered promiscuous mode
[   90.750047][ T5390] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.762575][ T5407] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   90.769755][ T5411] IPv6: NLM_F_CREATE should be specified when creating new route
[   90.788734][ T5407] EXT4-fs (loop0): Remounting filesystem read-only
[   90.800211][ T5389] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.807721][ T5389] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   90.818320][ T5389] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[   90.830306][ T5411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.841284][ T5389] bond2: (slave wireguard1): making interface the new active one
[   90.849138][ T5389] wireguard1: entered promiscuous mode
[   90.904794][ T5389] bond2: (slave wireguard1): Enslaving as an active interface with an up link
[   90.908996][ T5411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.946555][ T5406] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.028554][ T5417] netlink: 'syz.5.435': attribute type 21 has an invalid length.
[   91.028826][ T5406] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.036441][ T5417] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.038173][   T29] kauditd_printk_skb: 184 callbacks suppressed
[   91.038200][   T29] audit: type=1326 audit(1753613238.571:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.059987][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'.
[   91.092900][   T29] audit: type=1326 audit(1753613238.581:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.116475][   T29] audit: type=1326 audit(1753613238.581:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.139876][   T29] audit: type=1326 audit(1753613238.581:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.163247][   T29] audit: type=1326 audit(1753613238.581:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.186609][   T29] audit: type=1326 audit(1753613238.581:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.210032][   T29] audit: type=1326 audit(1753613238.581:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.233306][   T29] audit: type=1326 audit(1753613238.581:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.256856][   T29] audit: type=1326 audit(1753613238.581:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.285201][   T29] audit: type=1326 audit(1753613238.811:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb58ce9a9 code=0x7ffc0000
[   91.359077][ T5406] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.414007][ T5406] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.456823][ T5406] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.494043][ T5406] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.531310][ T5406] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.584585][ T5435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.704498][ T5439] loop0: detected capacity change from 0 to 2048
[   91.886946][ T5443] loop2: detected capacity change from 0 to 512
[   91.893632][ T5443] ext3: Unknown parameter 'fowner>00000000000000000000'
[   91.968928][ T5447] tmpfs: Unknown parameter 'rootcontext½'
[   91.987631][ T5447] loop1: detected capacity change from 0 to 1024
[   91.995775][ T5447] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   92.016210][ T5447] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.445: lblock 1 mapped to illegal pblock 1 (length 1)
[   92.062740][ T5447] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.445: Failed to acquire dquot type 0
[   92.082598][ T5454] loop2: detected capacity change from 0 to 512
[   92.099781][ T5454] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.120390][ T5447] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.445: Freeing blocks not in datazone - block = 0, count = 4096
[   92.134858][ T5454] Cannot find add_set index 0 as target
[   92.144639][ T5454] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   92.160488][ T5454] EXT4-fs (loop2): Remounting filesystem read-only
[   92.170699][ T5447] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.445: Invalid inode bitmap blk 0 in block_group 0
[   92.191056][ T4124] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1)
[   92.207596][ T5447] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   92.216464][ T4124] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0
[   92.229464][ T5447] EXT4-fs (loop1): 1 orphan inode deleted
[   92.237466][ T5447] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.445: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   92.308935][ T5460] loop2: detected capacity change from 0 to 512
[   92.321408][ T5460] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   92.335450][ T5460] EXT4-fs (loop2): invalid journal inode
[   92.362107][ T5464] loop1: detected capacity change from 0 to 164
[   92.368517][ T5460] EXT4-fs (loop2): can't get journal size
[   92.378225][ T5464] rock: directory entry would overflow storage
[   92.384455][ T5464] rock: sig=0x66, size=4, remaining=3
[   92.399197][ T5467] loop3: detected capacity change from 0 to 164
[   92.417812][ T5467] rock: directory entry would overflow storage
[   92.417834][ T5464] rock: directory entry would overflow storage
[   92.417841][ T5464] rock: sig=0x66, size=4, remaining=3
[   92.418061][ T5464] rock: directory entry would overflow storage
[   92.424100][ T5467] rock: sig=0x66, size=4, remaining=3
[   92.430294][ T5464] rock: sig=0x66, size=4, remaining=3
[   92.453299][ T5460] EXT4-fs (loop2): 1 truncate cleaned up
[   92.456288][ T5464] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   92.471089][ T5467] rock: directory entry would overflow storage
[   92.477392][ T5467] rock: sig=0x66, size=4, remaining=3
[   92.483550][ T5467] rock: directory entry would overflow storage
[   92.489772][ T5467] rock: sig=0x66, size=4, remaining=3
[   92.498303][ T5467] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   92.518162][ T5460] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.449: bg 0: block 255: padding at end of block bitmap is not set
[   92.557527][ T5462] vlan2: entered allmulticast mode
[   92.569221][ T5460] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   92.608472][ T5476] loop0: detected capacity change from 0 to 1024
[   92.615430][ T5476] EXT4-fs: Ignoring removed nobh option
[   92.621217][ T5476] EXT4-fs: inline encryption not supported
[   92.639440][ T5476] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.453: Allocating blocks 385-513 which overlap fs metadata
[   92.656535][ T5476] EXT4-fs (loop0): pa ffff888106dc05b0: logic 16, phys. 129, len 24
[   92.664588][ T5476] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   92.676989][ T5476] netlink: 'syz.0.453': attribute type 1 has an invalid length.
[   92.690794][ T5476] bond2: entered promiscuous mode
[   92.696086][ T5476] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.708660][ T5476] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.715855][ T5476] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   92.726553][ T5476] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[   92.742904][ T5476] bond2: (slave wireguard1): making interface the new active one
[   92.750818][ T5476] wireguard1: entered promiscuous mode
[   92.758406][ T5476] bond2: (slave wireguard1): Enslaving as an active interface with an up link
[   92.843092][ T5489] loop1: detected capacity change from 0 to 512
[   92.901125][ T5496] loop3: detected capacity change from 0 to 1024
[   92.901187][ T5489] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.909646][ T5496] EXT4-fs: Ignoring removed nobh option
[   92.923674][ T5496] EXT4-fs: inline encryption not supported
[   92.933769][ T5501] loop5: detected capacity change from 0 to 164
[   92.943113][ T5489] Cannot find add_set index 0 as target
[   92.949129][ T5501] rock: directory entry would overflow storage
[   92.955337][ T5501] rock: sig=0x66, size=4, remaining=3
[   92.969270][ T5489] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   92.985311][ T5489] EXT4-fs (loop1): Remounting filesystem read-only
[   92.986115][ T5501] rock: directory entry would overflow storage
[   92.998131][ T5501] rock: sig=0x66, size=4, remaining=3
[   92.998783][ T5502] netlink: 'syz.0.461': attribute type 21 has an invalid length.
[   93.022109][ T5496] netlink: 'syz.3.459': attribute type 1 has an invalid length.
[   93.039730][ T5496] bond3: entered promiscuous mode
[   93.051549][ T5496] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.062423][ T5501] rock: directory entry would overflow storage
[   93.068741][ T5501] rock: sig=0x66, size=4, remaining=3
[   93.078222][ T5496] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.085591][ T5496] bond3: (slave wireguard3): The slave device specified does not support setting the MAC address
[   93.096153][ T5496] bond3: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[   93.103438][ T5510] loop0: detected capacity change from 0 to 1024
[   93.113693][ T5496] bond3: (slave wireguard3): making interface the new active one
[   93.120124][ T5501] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   93.121509][ T5496] wireguard3: entered promiscuous mode
[   93.130957][ T5510] EXT4-fs: Ignoring removed orlov option
[   93.139457][ T5510] EXT4-fs: Ignoring removed mblk_io_submit option
[   93.147875][ T5496] bond3: (slave wireguard3): Enslaving as an active interface with an up link
[   93.165502][ T5513] loop1: detected capacity change from 0 to 512
[   93.185250][ T5513] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   93.205252][ T5513] EXT4-fs (loop1): invalid journal inode
[   93.217180][ T5513] EXT4-fs (loop1): can't get journal size
[   93.237089][ T5510] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   93.247062][ T5513] EXT4-fs (loop1): 1 truncate cleaned up
[   93.262995][ T5513] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.463: bg 0: block 255: padding at end of block bitmap is not set
[   93.285041][ T5513] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   93.297949][ T5522] loop2: detected capacity change from 0 to 512
[   93.317440][ T5522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   93.318965][ T5510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'.
[   93.331246][ T5527] loop3: detected capacity change from 0 to 164
[   93.349718][ T5522] EXT4-fs (loop2): 1 truncate cleaned up
[   93.363873][ T5527] rock: directory entry would overflow storage
[   93.370148][ T5527] rock: sig=0x66, size=4, remaining=3
[   93.384733][ T5527] rock: directory entry would overflow storage
[   93.391118][ T5527] rock: sig=0x66, size=4, remaining=3
[   93.398372][ T5527] rock: directory entry would overflow storage
[   93.404695][ T5527] rock: sig=0x66, size=4, remaining=3
[   93.423325][ T5533] loop5: detected capacity change from 0 to 512
[   93.439131][ T5533] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   93.440437][ T5527] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   93.461337][ T5535] loop0: detected capacity change from 0 to 512
[   93.462325][ T5535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   93.479667][ T5533] EXT4-fs (loop5): 1 truncate cleaned up
[   93.499055][ T5535] EXT4-fs (loop0): 1 truncate cleaned up
[   93.574279][ T5546] loop5: detected capacity change from 0 to 512
[   93.594536][ T5546] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   93.609813][ T5546] EXT4-fs (loop5): 1 truncate cleaned up
[   93.634258][ T5551] loop2: detected capacity change from 0 to 512
[   93.656264][ T5551] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   93.684764][ T5551] EXT4-fs (loop2): invalid journal inode
[   93.694078][ T5551] EXT4-fs (loop2): can't get journal size
[   93.733332][ T5551] EXT4-fs (loop2): 1 truncate cleaned up
[   93.760551][ T5560] loop0: detected capacity change from 0 to 512
[   93.765400][ T5551] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.475: bg 0: block 255: padding at end of block bitmap is not set
[   93.789546][ T5563] loop5: detected capacity change from 0 to 1024
[   93.798809][ T5563] EXT4-fs: Ignoring removed nobh option
[   93.804489][ T5563] EXT4-fs: inline encryption not supported
[   93.842201][ T5560] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.891649][ T5551] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   93.936283][ T5563] netlink: 'syz.5.476': attribute type 1 has an invalid length.
[   93.952964][ T5560] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   93.992116][ T5563] bond1: entered promiscuous mode
[   94.020587][ T5560] EXT4-fs (loop0): Remounting filesystem read-only
[   94.029537][ T5563] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.060642][ T5572] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.068131][ T5572] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   94.078775][ T5572] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   94.094451][ T5572] bond1: (slave wireguard0): making interface the new active one
[   94.102348][ T5572] wireguard0: entered promiscuous mode
[   94.112607][ T5572] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   94.329253][ T5590] loop1: detected capacity change from 0 to 512
[   94.339844][ T5590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.378621][ T5590] EXT4-fs (loop1): 1 truncate cleaned up
[   94.727106][ T5597] loop1: detected capacity change from 0 to 512
[   94.779459][ T5597] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.826890][ T5599] tmpfs: Unknown parameter 'rootcontext½'
[   94.847941][ T5597] EXT4-fs (loop1): 1 truncate cleaned up
[   94.870178][ T5599] loop3: detected capacity change from 0 to 1024
[   94.908535][ T5599] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   94.933231][ T5599] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.488: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.948492][ T5599] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.488: Failed to acquire dquot type 0
[   94.960138][ T5599] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.488: Freeing blocks not in datazone - block = 0, count = 4096
[   94.974699][ T5599] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.488: Invalid inode bitmap blk 0 in block_group 0
[   95.007338][ T5599] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   95.020744][ T4124] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1)
[   95.035514][ T4124] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0
[   95.049211][ T5599] EXT4-fs (loop3): 1 orphan inode deleted
[   95.057132][ T5599] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.488: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   95.307059][ T5617] loop2: detected capacity change from 0 to 1024
[   95.316000][ T5619] loop3: detected capacity change from 0 to 1024
[   95.356997][ T5615] loop0: detected capacity change from 0 to 2048
[   95.381192][ T5617] EXT4-fs: Ignoring removed nobh option
[   95.386923][ T5617] EXT4-fs: inline encryption not supported
[   95.396194][ T5619] EXT4-fs: Ignoring removed nobh option
[   95.401852][ T5619] EXT4-fs: inline encryption not supported
[   95.486792][ T5617] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.493: Allocating blocks 385-513 which overlap fs metadata
[   95.562488][ T5617] EXT4-fs (loop2): pa ffff888106e7d9a0: logic 16, phys. 129, len 24
[   95.570687][ T5617] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   95.600463][ T5619] netlink: 'syz.3.492': attribute type 1 has an invalid length.
[   95.624103][ T5633] netlink: 'syz.2.493': attribute type 1 has an invalid length.
[   95.643216][ T5619] bond4: entered promiscuous mode
[   95.663343][ T5619] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.671405][ T5635] loop1: detected capacity change from 0 to 1024
[   95.682509][ T5635] EXT4-fs: Ignoring removed orlov option
[   95.688493][ T5635] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.694671][ T5633] bond4: entered promiscuous mode
[   95.706241][ T5633] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.717717][ T5635] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   95.742244][ T5636] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.754241][ T5636] bond4: (slave wireguard4): The slave device specified does not support setting the MAC address
[   95.765014][ T5636] bond4: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[   95.780829][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'.
[   95.795643][ T5636] bond4: (slave wireguard4): making interface the new active one
[   95.803621][ T5636] wireguard4: entered promiscuous mode
[   95.811025][ T5636] bond4: (slave wireguard4): Enslaving as an active interface with an up link
[   95.866510][ T5617] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.892515][ T5617] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address
[   95.903209][ T5617] bond4: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[   95.942853][ T5617] bond4: (slave wireguard2): making interface the new active one
[   95.950974][ T5617] wireguard2: entered promiscuous mode
[   95.970123][ T5617] bond4: (slave wireguard2): Enslaving as an active interface with an up link
[   95.977308][ T5650] FAULT_INJECTION: forcing a failure.
[   95.977308][ T5650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.992308][ T5650] CPU: 1 UID: 0 PID: 5650 Comm: syz.3.500 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   95.992340][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   95.992382][ T5650] Call Trace:
[   95.992388][ T5650]  <TASK>
[   95.992395][ T5650]  __dump_stack+0x1d/0x30
[   95.992452][ T5650]  dump_stack_lvl+0xe8/0x140
[   95.992472][ T5650]  dump_stack+0x15/0x1b
[   95.992565][ T5650]  should_fail_ex+0x265/0x280
[   95.992595][ T5650]  should_fail+0xb/0x20
[   95.992703][ T5650]  should_fail_usercopy+0x1a/0x20
[   95.992739][ T5650]  _copy_from_user+0x1c/0xb0
[   95.992766][ T5650]  ___sys_sendmsg+0xc1/0x1d0
[   95.992860][ T5650]  __sys_sendmmsg+0x178/0x300
[   95.992899][ T5650]  __x64_sys_sendmmsg+0x57/0x70
[   95.993001][ T5650]  x64_sys_call+0x2f2f/0x2fb0
[   95.993089][ T5650]  do_syscall_64+0xd2/0x200
[   95.993115][ T5650]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   95.993149][ T5650]  ? clear_bhb_loop+0x40/0x90
[   95.993193][ T5650]  ? clear_bhb_loop+0x40/0x90
[   95.993218][ T5650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.993240][ T5650] RIP: 0033:0x7f501ea4e9a9
[   95.993270][ T5650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.993293][ T5650] RSP: 002b:00007f501d0af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   95.993314][ T5650] RAX: ffffffffffffffda RBX: 00007f501ec75fa0 RCX: 00007f501ea4e9a9
[   95.993329][ T5650] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000004
[   95.993344][ T5650] RBP: 00007f501d0af090 R08: 0000000000000000 R09: 0000000000000000
[   95.993357][ T5650] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.993372][ T5650] R13: 0000000000000000 R14: 00007f501ec75fa0 R15: 00007ffd77fb0e48
[   95.993462][ T5650]  </TASK>
[   96.221703][ T5654] loop1: detected capacity change from 0 to 512
[   96.237589][ T5654] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.252855][   T29] kauditd_printk_skb: 94 callbacks suppressed
[   96.252872][   T29] audit: type=1326 audit(1753613243.781:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.254399][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.502'.
[   96.259056][   T29] audit: type=1326 audit(1753613243.781:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.325857][ T5654] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   96.340401][   T29] audit: type=1326 audit(1753613243.781:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.341483][ T5654] EXT4-fs (loop1): Remounting filesystem read-only
[   96.363836][   T29] audit: type=1326 audit(1753613243.781:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.394031][   T29] audit: type=1326 audit(1753613243.781:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.417496][   T29] audit: type=1326 audit(1753613243.781:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.440825][   T29] audit: type=1326 audit(1753613243.781:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.464206][   T29] audit: type=1326 audit(1753613243.781:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.487675][   T29] audit: type=1326 audit(1753613243.781:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.511129][   T29] audit: type=1326 audit(1753613243.781:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.5.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4462ee9a9 code=0x7ffc0000
[   96.620390][ T5675] FAULT_INJECTION: forcing a failure.
[   96.620390][ T5675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.633754][ T5675] CPU: 1 UID: 0 PID: 5675 Comm: syz.5.512 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[   96.633785][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   96.633801][ T5675] Call Trace:
[   96.633809][ T5675]  <TASK>
[   96.633825][ T5675]  __dump_stack+0x1d/0x30
[   96.633852][ T5675]  dump_stack_lvl+0xe8/0x140
[   96.633877][ T5675]  dump_stack+0x15/0x1b
[   96.633897][ T5675]  should_fail_ex+0x265/0x280
[   96.633935][ T5675]  should_fail+0xb/0x20
[   96.633995][ T5675]  should_fail_usercopy+0x1a/0x20
[   96.634027][ T5675]  _copy_from_user+0x1c/0xb0
[   96.634064][ T5675]  ___sys_sendmsg+0xc1/0x1d0
[   96.634154][ T5675]  __sys_sendmmsg+0x178/0x300
[   96.634259][ T5675]  __x64_sys_sendmmsg+0x57/0x70
[   96.634335][ T5675]  x64_sys_call+0x2f2f/0x2fb0
[   96.634356][ T5675]  do_syscall_64+0xd2/0x200
[   96.634376][ T5675]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   96.634402][ T5675]  ? clear_bhb_loop+0x40/0x90
[   96.634534][ T5675]  ? clear_bhb_loop+0x40/0x90
[   96.634562][ T5675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.634636][ T5675] RIP: 0033:0x7fc4462ee9a9
[   96.634650][ T5675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.634667][ T5675] RSP: 002b:00007fc44494f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   96.634684][ T5675] RAX: ffffffffffffffda RBX: 00007fc446515fa0 RCX: 00007fc4462ee9a9
[   96.634696][ T5675] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005
[   96.634735][ T5675] RBP: 00007fc44494f090 R08: 0000000000000000 R09: 0000000000000000
[   96.634750][ T5675] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001
[   96.634764][ T5675] R13: 0000000000000000 R14: 00007fc446515fa0 R15: 00007ffdd2377238
[   96.634787][ T5675]  </TASK>
[   96.842152][ T5678] loop5: detected capacity change from 0 to 512
[   96.858603][ T5678] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.897430][ T5678] Cannot find add_set index 0 as target
[   96.925409][ T5678] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   96.970835][ T5678] EXT4-fs (loop5): Remounting filesystem read-only
[   97.092695][ T5686] netlink: 228 bytes leftover after parsing attributes in process `syz.5.515'.
[   97.121786][ T5688] loop1: detected capacity change from 0 to 512
[   97.150155][ T5688] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.166317][ T5691] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.515'.
[   97.184020][ T5686] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.515'.
[   97.228947][ T5688] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   97.244725][ T5688] EXT4-fs (loop1): Remounting filesystem read-only
[   97.287168][ T5695] loop5: detected capacity change from 0 to 2048
[   97.405020][ T5712] loop0: detected capacity change from 0 to 512
[   97.422371][ T5712] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.434669][ T5711] loop1: detected capacity change from 0 to 512
[   97.458958][ T5712] Cannot find add_set index 0 as target
[   97.481703][ T5712] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   97.497342][ T5712] EXT4-fs (loop0): Remounting filesystem read-only
[   97.500717][ T5719] loop3: detected capacity change from 0 to 1024
[   97.509292][ T5715] vlan2: entered allmulticast mode
[   97.527502][ T5719] EXT4-fs: Ignoring removed nobh option
[   97.527803][ T5711] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.533138][ T5719] EXT4-fs: inline encryption not supported
[   97.549464][ T5711] Cannot find add_set index 0 as target
[   97.570605][ T5711] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   97.587364][ T5711] EXT4-fs (loop1): Remounting filesystem read-only
[   97.610012][ T5719] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.526: Allocating blocks 385-513 which overlap fs metadata
[   97.635445][ T5726] loop0: detected capacity change from 0 to 512
[   97.648295][ T5719] EXT4-fs (loop3): pa ffff888106dc0850: logic 16, phys. 129, len 24
[   97.656402][ T5719] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   97.671948][ T5726] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.696166][ T5726] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   97.710827][ T5732] loop1: detected capacity change from 0 to 512
[   97.712260][ T5726] EXT4-fs (loop0): Remounting filesystem read-only
[   97.723353][ T5719] netlink: 'syz.3.526': attribute type 1 has an invalid length.
[   97.749469][ T5719] bond5: entered promiscuous mode
[   97.754982][ T5719] 8021q: adding VLAN 0 to HW filter on device bond5
[   97.756208][ T5732] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.777628][ T5732] Cannot find add_set index 0 as target
[   97.785645][ T5730] loop5: detected capacity change from 0 to 512
[   97.793918][ T5719] 8021q: adding VLAN 0 to HW filter on device bond5
[   97.800984][ T5732] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   97.814122][ T5730] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   97.817116][ T5732] EXT4-fs (loop1): Remounting filesystem read-only
[   97.832681][ T5719] bond5: (slave wireguard5): The slave device specified does not support setting the MAC address
[   97.843276][ T5719] bond5: (slave wireguard5): Setting fail_over_mac to active for active-backup mode
[   97.854390][ T5739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   97.863719][ T5739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   97.865076][ T5719] bond5: (slave wireguard5): making interface the new active one
[   97.878779][ T5719] wireguard5: entered promiscuous mode
[   97.884655][ T5730] EXT4-fs (loop5): 1 truncate cleaned up
[   97.884870][ T5738] netlink: 'syz.2.530': attribute type 21 has an invalid length.
[   97.910963][ T5719] bond5: (slave wireguard5): Enslaving as an active interface with an up link
[   97.974656][ T5739] bond5: (slave wireguard6): The slave device specified does not support setting the MAC address
[   97.997375][ T5739] bond5: (slave wireguard6): Enslaving as a backup interface with an up link
[   98.012227][ T5749] loop5: detected capacity change from 0 to 512
[   98.063381][ T5744] loop2: detected capacity change from 0 to 512
[   98.076049][ T5744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.081684][ T5749] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.099779][ T5744] EXT4-fs (loop2): 1 truncate cleaned up
[   98.147507][ T5749] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   98.162569][ T5749] EXT4-fs (loop5): Remounting filesystem read-only
[   98.278018][ T5758] netlink: 'syz.0.536': attribute type 21 has an invalid length.
[   98.635190][ T5763] loop0: detected capacity change from 0 to 512
[   98.656202][ T5769] loop2: detected capacity change from 0 to 164
[   98.669076][ T5763] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.686910][ T5769] rock: directory entry would overflow storage
[   98.693196][ T5769] rock: sig=0x66, size=4, remaining=3
[   98.698726][ T5763] Cannot find add_set index 0 as target
[   98.710222][ T5768] loop5: detected capacity change from 0 to 1024
[   98.717116][ T5763] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   98.719646][ T5768] EXT4-fs: Ignoring removed nobh option
[   98.736932][ T5768] EXT4-fs: inline encryption not supported
[   98.752390][ T5769] rock: directory entry would overflow storage
[   98.758674][ T5769] rock: sig=0x66, size=4, remaining=3
[   98.779654][ T5775] loop3: detected capacity change from 0 to 2048
[   98.839487][ T5778] rock: directory entry would overflow storage
[   98.845839][ T5778] rock: sig=0x66, size=4, remaining=3
[   98.851710][ T5763] EXT4-fs (loop0): Remounting filesystem read-only
[   98.862571][ T5768] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.538: Allocating blocks 385-513 which overlap fs metadata
[   98.885934][ T5769] syz!: rxe_newlink: already configured on team_slave_0
[   98.906153][ T5768] EXT4-fs (loop5): pa ffff888106dc08c0: logic 16, phys. 129, len 24
[   98.914266][ T5768] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   98.961227][ T5783] netlink: 'syz.5.538': attribute type 1 has an invalid length.
[   99.011850][ T5783] bond2: entered promiscuous mode
[   99.019449][ T5783] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.033159][ T5787] loop0: detected capacity change from 0 to 512
[   99.054125][ T5768] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.063597][ T5787] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.076594][ T5768] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   99.087204][ T5768] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[   99.102744][ T5787] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[   99.118944][ T5768] bond2: (slave wireguard1): making interface the new active one
[   99.120128][ T5787] EXT4-fs (loop0): Remounting filesystem read-only
[   99.126782][ T5768] wireguard1: entered promiscuous mode
[   99.144373][ T5768] bond2: (slave wireguard1): Enslaving as an active interface with an up link
[   99.311739][ T5799] loop0: detected capacity change from 0 to 1024
[   99.318340][ T5797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.322847][ T5799] EXT4-fs: Ignoring removed nobh option
[   99.339412][ T5799] EXT4-fs: inline encryption not supported
[   99.361220][ T5801] loop5: detected capacity change from 0 to 2048
[   99.384003][ T5805] tmpfs: Unknown parameter 'rootcontext½'
[   99.395363][ T5805] loop2: detected capacity change from 0 to 1024
[   99.406562][ T5799] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.545: Allocating blocks 385-513 which overlap fs metadata
[   99.421182][ T5805] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   99.442723][ T5799] EXT4-fs (loop0): pa ffff888106e7db60: logic 16, phys. 129, len 24
[   99.450805][ T5799] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   99.463653][ T5805] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.549: lblock 1 mapped to illegal pblock 1 (length 1)
[   99.480790][ T5799] netlink: 'syz.0.545': attribute type 1 has an invalid length.
[   99.537138][ T5805] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.549: Failed to acquire dquot type 0
[   99.555180][ T5799] bond3: entered promiscuous mode
[   99.565046][ T5799] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.608739][ T5805] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.549: Freeing blocks not in datazone - block = 0, count = 4096
[   99.633162][ T5805] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.549: Invalid inode bitmap blk 0 in block_group 0
[   99.634335][ T5808] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.653482][ T5808] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address
[   99.655052][ T4067] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[   99.664050][ T5808] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[   99.667910][ T5799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.705923][ T5799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.719302][ T5805] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   99.743030][ T5808] bond3: (slave wireguard2): making interface the new active one
[   99.750954][ T5808] wireguard2: entered promiscuous mode
[   99.758655][ T5808] bond3: (slave wireguard2): Enslaving as an active interface with an up link
[   99.761215][ T4067] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0
[   99.814273][ T5799] bond3: (slave wireguard3): The slave device specified does not support setting the MAC address
[   99.838727][ T5805] EXT4-fs (loop2): 1 orphan inode deleted
[   99.854274][ T5799] bond3: (slave wireguard3): Enslaving as a backup interface with an up link
[   99.867843][ T5816] pimreg: entered allmulticast mode
[   99.882690][ T5816] pimreg: left allmulticast mode
[   99.909878][ T5820] tmpfs: Unknown parameter 'rootcontext½'
[   99.926138][ T5805] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.549: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   99.948529][ T5820] loop1: detected capacity change from 0 to 1024
[   99.961703][ T5820] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   99.989926][ T5830] loop3: detected capacity change from 0 to 164
[  100.002569][ T5830] rock: directory entry would overflow storage
[  100.008864][ T5830] rock: sig=0x66, size=4, remaining=3
[  100.038150][ T5820] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.553: lblock 1 mapped to illegal pblock 1 (length 1)
[  100.093807][ T5830] rock: directory entry would overflow storage
[  100.100053][ T5830] rock: sig=0x66, size=4, remaining=3
[  100.118461][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'.
[  100.136686][ T5820] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.553: Failed to acquire dquot type 0
[  100.156586][ T5847] rock: directory entry would overflow storage
[  100.162814][ T5847] rock: sig=0x66, size=4, remaining=3
[  100.187704][ T5820] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.553: Freeing blocks not in datazone - block = 0, count = 4096
[  100.202223][ T5848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.243466][ T5820] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.553: Invalid inode bitmap blk 0 in block_group 0
[  100.257524][ T4121] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 1)
[  100.258693][ T5830] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  100.272717][ T5820] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  100.333277][ T4121] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:61: Failed to release dquot type 0
[  100.580020][ T5820] EXT4-fs (loop1): 1 orphan inode deleted
[  100.646072][ T5820] EXT4-fs mount: 129 callbacks suppressed
[  100.646090][ T5820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.684422][ T5877] loop5: detected capacity change from 0 to 1024
[  100.758409][ T5877] EXT4-fs: Ignoring removed nobh option
[  100.764062][ T5877] EXT4-fs: inline encryption not supported
[  100.804691][ T5820] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.553: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  100.844077][ T5886] loop2: detected capacity change from 0 to 164
[  100.856884][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.863644][ T5877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.867389][ T5886] rock: directory entry would overflow storage
[  100.884731][ T5886] rock: sig=0x66, size=4, remaining=3
[  100.898117][ T5877] netlink: 'syz.5.558': attribute type 1 has an invalid length.
[  100.911708][ T5886] rock: directory entry would overflow storage
[  100.918043][ T5886] rock: sig=0x66, size=4, remaining=3
[  100.926520][ T5877] bond3: entered promiscuous mode
[  100.931778][ T5877] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.953876][ T5886] rock: directory entry would overflow storage
[  100.960272][ T5886] rock: sig=0x66, size=4, remaining=3
[  100.982078][ T5929] loop1: detected capacity change from 0 to 512
[  100.992832][ T5929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  101.010347][ T5886] syz!: rxe_newlink: already configured on team_slave_0
[  101.019560][ T5924] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.028358][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'.
[  101.042409][ T5924] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address
[  101.053126][ T5924] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  101.064034][ T5929] EXT4-fs (loop1): 1 truncate cleaned up
[  101.070196][ T5929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.117062][ T5924] bond3: (slave wireguard2): making interface the new active one
[  101.124931][ T5924] wireguard2: entered promiscuous mode
[  101.142023][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.157403][ T5924] bond3: (slave wireguard2): Enslaving as an active interface with an up link
[  101.209552][ T5952] loop1: detected capacity change from 0 to 512
[  101.217420][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'.
[  101.233645][ T5955] netlink: 'syz.0.565': attribute type 4 has an invalid length.
[  101.257551][ T5952] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  101.266682][ T4495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.283291][ T5961] loop0: detected capacity change from 0 to 1024
[  101.290632][ T5961] EXT4-fs: Ignoring removed nobh option
[  101.296385][ T5961] EXT4-fs: inline encryption not supported
[  101.312468][ T5952] EXT4-fs (loop1): invalid journal inode
[  101.324998][ T5952] EXT4-fs (loop1): can't get journal size
[  101.331861][ T5952] EXT4-fs (loop1): 1 truncate cleaned up
[  101.346362][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.367109][ T5952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.390783][ T5990] netlink: 'syz.5.566': attribute type 21 has an invalid length.
[  101.399103][ T5952] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.564: bg 0: block 255: padding at end of block bitmap is not set
[  101.414929][ T5961] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.567: Allocating blocks 385-513 which overlap fs metadata
[  101.418941][ T5952] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  101.469794][ T5961] EXT4-fs (loop0): pa ffff888106e7db60: logic 16, phys. 129, len 24
[  101.477924][ T5961] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  101.479742][   T29] kauditd_printk_skb: 94 callbacks suppressed
[  101.479758][   T29] audit: type=1326 audit(1753613249.011:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5946 comm="syz.1.564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5f3fe9a9 code=0x0
[  101.523014][ T5961] netlink: 'syz.0.567': attribute type 1 has an invalid length.
[  101.558561][ T5961] bond4: entered promiscuous mode
[  101.563974][ T5961] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.583415][ T5961] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.592600][ T5961] bond4: (slave wireguard4): The slave device specified does not support setting the MAC address
[  101.603212][ T5961] bond4: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  101.615128][ T6006] netlink: 'syz.5.570': attribute type 7 has an invalid length.
[  101.625900][ T5961] bond4: (slave wireguard4): making interface the new active one
[  101.633715][ T5961] wireguard4: entered promiscuous mode
[  101.641192][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.648573][ T6045] IPv6: NLM_F_CREATE should be set when creating new route
[  101.655895][ T6045] IPv6: NLM_F_CREATE should be set when creating new route
[  101.677858][ T5961] bond4: (slave wireguard4): Enslaving as an active interface with an up link
[  101.683970][   T29] audit: type=1400 audit(1753613249.201:1545): avc:  denied  { setopt } for  pid=6005 comm="syz.5.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  101.728513][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.745799][   T29] audit: type=1400 audit(1753613249.271:1546): avc:  denied  { getopt } for  pid=6005 comm="syz.5.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  101.776852][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.920732][ T6070] loop2: detected capacity change from 0 to 512
[  101.933682][ T6070] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.572: iget: bad i_size value: 38620345925642
[  101.936249][ T6077] loop3: detected capacity change from 0 to 164
[  101.980411][ T6077] rock: directory entry would overflow storage
[  101.986760][ T6077] rock: sig=0x66, size=4, remaining=3
[  102.003118][ T6069] loop0: detected capacity change from 0 to 2048
[  102.028999][ T6070] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.572: couldn't read orphan inode 15 (err -117)
[  102.067815][ T6077] rock: directory entry would overflow storage
[  102.071455][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.074011][ T6077] rock: sig=0x66, size=4, remaining=3
[  102.085099][ T6069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.105807][ T6070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.151480][ T6077] rock: directory entry would overflow storage
[  102.157808][ T6077] rock: sig=0x66, size=4, remaining=3
[  102.188379][ T6100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.207544][ T6070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.210081][ T6069] loop9: detected capacity change from 0 to 7
[  102.228840][ T6077] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  102.242198][ T6069] Buffer I/O error on dev loop9, logical block 0, async page read
[  102.280193][ T6069] Buffer I/O error on dev loop9, logical block 0, async page read
[  102.288216][ T6069]  loop9: unable to read partition table
[  102.294909][ T6100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.334766][ T6069] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  102.334766][ T6069] 
) failed (rc=-5)
[  102.356844][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read
[  102.375974][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read
[  102.383978][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read
[  102.398524][ T6100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.409023][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read
[  102.419643][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read
[  102.432159][ T6131] netlink: 200 bytes leftover after parsing attributes in process `syz.0.571'.
[  102.508191][ T6140] loop2: detected capacity change from 0 to 1024
[  102.518915][ T6100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.519420][ T6140] EXT4-fs: Ignoring removed nobh option
[  102.534867][ T6140] EXT4-fs: inline encryption not supported
[  102.546846][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'.
[  102.556810][ T6138] loop5: detected capacity change from 0 to 2048
[  102.620122][ T6140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.634552][ T6100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.726923][ T6100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.797806][ T6140] bond5: entered promiscuous mode
[  102.821750][ T6140] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.862725][ T6100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.906388][ T6193] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.922665][ T6193] bond5: (slave wireguard3): The slave device specified does not support setting the MAC address
[  102.933311][ T6193] bond5: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  102.939590][ T6054] syz.0.571 (6054) used greatest stack depth: 5904 bytes left
[  102.964576][ T6193] bond5: (slave wireguard3): making interface the new active one
[  102.972509][ T6193] wireguard3: entered promiscuous mode
[  103.006298][ T6202] loop3: detected capacity change from 0 to 512
[  103.013055][ T6202] ext3: Unknown parameter 'fowner>00000000000000000000'
[  103.041684][ T6193] bond5: (slave wireguard3): Enslaving as an active interface with an up link
[  103.069873][ T6100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.081181][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.155473][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.203838][   T29] audit: type=1326 audit(1753613250.731:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[  103.335023][   T29] audit: type=1326 audit(1753613250.761:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[  103.358538][   T29] audit: type=1326 audit(1753613250.761:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[  103.849433][ T6226] loop1: detected capacity change from 0 to 2048
[  104.139833][ T6264] tmpfs: Unknown parameter 'rootcontext½'
[  104.186581][ T6264] loop0: detected capacity change from 0 to 1024
[  104.216449][ T6264] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  104.266589][ T6264] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.586: lblock 1 mapped to illegal pblock 1 (length 1)
[  104.301130][ T6264] Quota error (device loop0): write_blk: dquota write failed
[  104.308596][ T6264] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  104.347583][ T6264] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.586: Failed to acquire dquot type 0
[  104.360006][ T6264] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.586: Freeing blocks not in datazone - block = 0, count = 4096
[  104.376578][ T6264] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.586: Invalid inode bitmap blk 0 in block_group 0
[  104.389299][ T6277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.405119][ T4076] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  104.420465][ T6264] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  104.430279][ T4076] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  104.434386][ T6264] EXT4-fs (loop0): 1 orphan inode deleted
[  104.438788][ T4076] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0
[  104.459530][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.501894][ T6264] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.586: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  104.537720][ T6281] loop1: detected capacity change from 0 to 512
[  104.547223][ T6281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  104.562712][ T6283] loop2: detected capacity change from 0 to 512
[  104.578047][ T6281] EXT4-fs (loop1): 1 truncate cleaned up
[  104.595825][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.611856][ T6283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.627499][ T6283] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.628689][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.649889][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.690757][ T6297] loop0: detected capacity change from 0 to 1024
[  104.697697][ T6283] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  104.767619][ T6283] EXT4-fs (loop2): Remounting filesystem read-only
[  104.774715][ T6297] EXT4-fs: Ignoring removed nobh option
[  104.780395][ T6297] EXT4-fs: inline encryption not supported
[  104.788497][   T29] audit: type=1326 audit(1753613252.321:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6294 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5f3fe9a9 code=0x7ffc0000
[  104.819437][ T6305] loop5: detected capacity change from 0 to 1024
[  104.841508][ T6305] EXT4-fs: Ignoring removed nobh option
[  104.847259][ T6305] EXT4-fs: inline encryption not supported
[  104.854535][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.864651][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.904259][ T6297] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.590: Allocating blocks 385-513 which overlap fs metadata
[  104.925380][ T6305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.937993][ T6318] loop1: detected capacity change from 0 to 512
[  104.951474][ T6297] EXT4-fs (loop0): pa ffff888106e7dc40: logic 16, phys. 129, len 24
[  104.959580][ T6297] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  104.974871][ T6305] validate_nla: 1 callbacks suppressed
[  104.974887][ T6305] netlink: 'syz.5.592': attribute type 1 has an invalid length.
[  104.976828][ T6297] netlink: 'syz.0.590': attribute type 1 has an invalid length.
[  105.000642][ T6318] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.596: iget: bad i_size value: 38620345925642
[  105.013719][ T6305] bond4: entered promiscuous mode
[  105.019989][ T6305] 8021q: adding VLAN 0 to HW filter on device bond4
[  105.023212][ T6318] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.596: couldn't read orphan inode 15 (err -117)
[  105.040451][ T6305] 8021q: adding VLAN 0 to HW filter on device bond4
[  105.040548][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.049027][ T6305] bond4: (slave wireguard3): The slave device specified does not support setting the MAC address
[  105.067522][ T6318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.070241][ T6305] bond4: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  105.098481][ T6305] bond4: (slave wireguard3): making interface the new active one
[  105.106438][ T6305] wireguard3: entered promiscuous mode
[  105.123209][ T6374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.145937][ T6374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.157828][ T6305] bond4: (slave wireguard3): Enslaving as an active interface with an up link
[  105.158248][ T6387] loop2: detected capacity change from 0 to 164
[  105.174578][ T6297] bond5: entered promiscuous mode
[  105.182666][ T6297] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.197485][ T6387] rock: directory entry would overflow storage
[  105.203718][ T6387] rock: sig=0x66, size=4, remaining=3
[  105.213462][ T6423] loop3: detected capacity change from 0 to 512
[  105.224892][ T6387] rock: directory entry would overflow storage
[  105.226361][ T4495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.231242][ T6387] rock: sig=0x66, size=4, remaining=3
[  105.247444][ T6371] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.254692][ T6371] bond5: (slave wireguard5): The slave device specified does not support setting the MAC address
[  105.262813][ T6387] rock: directory entry would overflow storage
[  105.265283][ T6371] bond5: (slave wireguard5): Setting fail_over_mac to active for active-backup mode
[  105.271423][ T6387] rock: sig=0x66, size=4, remaining=3
[  105.291419][ T6387] syz!: rxe_newlink: already configured on team_slave_0
[  105.298591][ T6430] loop1: detected capacity change from 0 to 512
[  105.303236][ T6423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.307413][ T6430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  105.319018][ T6371] bond5: (slave wireguard5): making interface the new active one
[  105.329469][ T6423] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.335051][ T6371] wireguard5: entered promiscuous mode
[  105.351072][ T6423] Cannot find add_set index 0 as target
[  105.359608][ T6430] EXT4-fs (loop1): 1 truncate cleaned up
[  105.380845][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.393898][ T6423] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  105.426098][ T6371] bond5: (slave wireguard5): Enslaving as an active interface with an up link
[  105.436681][ T6423] EXT4-fs (loop3): Remounting filesystem read-only
[  105.471646][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.512628][ T6374] bond5: (slave wireguard6): The slave device specified does not support setting the MAC address
[  105.600770][ T6460] loop3: detected capacity change from 0 to 512
[  105.604653][ T6374] bond5: (slave wireguard6): Enslaving as a backup interface with an up link
[  105.624690][ T6460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  105.640101][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.650085][ T6460] EXT4-fs (loop3): 1 truncate cleaned up
[  105.685725][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.712384][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.735057][ T6472] loop2: detected capacity change from 0 to 512
[  105.744125][ T6474] loop1: detected capacity change from 0 to 512
[  105.761227][ T6472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.773762][ T6474] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  105.783469][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.801476][ T6474] EXT4-fs (loop1): invalid journal inode
[  105.811851][ T6472] EXT4-fs (loop2): 1 truncate cleaned up
[  105.831340][ T6472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.844036][ T6474] EXT4-fs (loop1): can't get journal size
[  105.880982][ T6474] EXT4-fs (loop1): 1 truncate cleaned up
[  105.901182][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.946032][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.997605][ T6474] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.604: bg 0: block 255: padding at end of block bitmap is not set
[  106.067006][ T6474] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  106.201939][ T6512] netlink: 'syz.0.611': attribute type 7 has an invalid length.
[  106.209862][ T6532] loop2: detected capacity change from 0 to 1024
[  106.219085][ T6532] EXT4-fs: Ignoring removed nobh option
[  106.224797][ T6532] EXT4-fs: inline encryption not supported
[  106.353754][ T6532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.451566][ T6532] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[  106.484360][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.615'.
[  106.546910][ T6532] bond6: entered promiscuous mode
[  106.585435][ T6532] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.605743][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.693437][ T6575] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.744661][ T6582] loop5: detected capacity change from 0 to 512
[  106.755372][ T6575] bond6: (slave wireguard4): The slave device specified does not support setting the MAC address
[  106.766091][ T6575] bond6: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  106.790229][ T6582] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.617: iget: bad i_size value: 38620345925642
[  106.861945][ T6575] bond6: (slave wireguard4): making interface the new active one
[  106.869800][ T6575] wireguard4: entered promiscuous mode
[  106.892870][ T6582] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.617: couldn't read orphan inode 15 (err -117)
[  106.922038][ T6575] bond6: (slave wireguard4): Enslaving as an active interface with an up link
[  106.965166][ T6582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.007472][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.033795][ T6591] tmpfs: Unknown parameter 'rootcontext½'
[  107.044712][ T6591] loop3: detected capacity change from 0 to 1024
[  107.044850][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.070631][ T6591] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  107.103678][ T6591] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.620: lblock 1 mapped to illegal pblock 1 (length 1)
[  107.143901][ T6607] loop2: detected capacity change from 0 to 512
[  107.151141][ T6607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  107.200780][ T6607] EXT4-fs (loop2): 1 truncate cleaned up
[  107.217663][ T6591] __quota_error: 15 callbacks suppressed
[  107.217677][ T6591] Quota error (device loop3): write_blk: dquota write failed
[  107.230908][ T6591] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  107.259433][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.289858][ T6591] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.620: Failed to acquire dquot type 0
[  107.322193][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.355621][ T6591] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.620: Freeing blocks not in datazone - block = 0, count = 4096
[  107.411750][ T6591] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.620: Invalid inode bitmap blk 0 in block_group 0
[  107.430366][ T6591] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  107.443397][ T4124] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1)
[  107.448191][ T6591] EXT4-fs (loop3): 1 orphan inode deleted
[  107.465897][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.503441][ T6591] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.620: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  107.538352][ T4124] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  107.546930][ T4124] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0
[  107.577967][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.767073][ T6654] loop1: detected capacity change from 0 to 512
[  107.774603][ T6652] loop2: detected capacity change from 0 to 512
[  107.791718][ T6652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  107.803228][ T6654] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  107.816128][ T6654] EXT4-fs (loop1): invalid journal inode
[  107.824755][ T6652] EXT4-fs (loop2): 1 truncate cleaned up
[  107.833456][ T6654] EXT4-fs (loop1): can't get journal size
[  107.850346][ T6652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.898359][ T6665] loop3: detected capacity change from 0 to 512
[  107.905242][ T6665] ext3: Unknown parameter 'fowner>00000000000000000000'
[  107.931220][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.983425][ T6654] EXT4-fs (loop1): 1 truncate cleaned up
[  108.039372][ T6654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.154329][ T6654] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.627: bg 0: block 255: padding at end of block bitmap is not set
[  108.176532][ T6664] loop0: detected capacity change from 0 to 2048
[  108.185348][ T6675] loop5: detected capacity change from 0 to 1024
[  108.204033][ T6675] EXT4-fs: Ignoring removed nobh option
[  108.209781][ T6675] EXT4-fs: inline encryption not supported
[  108.271320][ T6654] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  108.289705][   T29] audit: type=1326 audit(1753613255.821:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.1.627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5f3fe9a9 code=0x0
[  108.317193][   T29] audit: type=1326 audit(1753613255.851:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.2.629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25290ee9a9 code=0x0
[  108.369314][ T6675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.386129][ T6675] netlink: 'syz.5.630': attribute type 1 has an invalid length.
[  108.411212][ T6675] bond5: entered promiscuous mode
[  108.417820][ T6675] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.431176][ T6675] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.439923][ T6675] bond5: (slave wireguard4): The slave device specified does not support setting the MAC address
[  108.450515][ T6675] bond5: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  108.465399][ T6675] bond5: (slave wireguard4): making interface the new active one
[  108.473463][ T6675] wireguard4: entered promiscuous mode
[  108.481537][ T6675] bond5: (slave wireguard4): Enslaving as an active interface with an up link
[  108.584503][ T4495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.622830][ T6737] loop3: detected capacity change from 0 to 512
[  108.729174][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.743250][ T6737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.767873][ T6737] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.788316][ T6752] tmpfs: Unknown parameter 'rootcontext½'
[  108.799926][ T6753] loop0: detected capacity change from 0 to 1024
[  108.812794][ T6752] loop1: detected capacity change from 0 to 1024
[  108.821757][ T6737] Cannot find add_set index 0 as target
[  108.901221][ T6755] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  108.919409][ T6753] EXT4-fs: Ignoring removed orlov option
[  108.925183][ T6753] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.934026][ T6752] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  108.945266][ T6755] EXT4-fs (loop3): Remounting filesystem read-only
[  108.954789][ T6753] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  108.979460][ T6752] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.635: lblock 1 mapped to illegal pblock 1 (length 1)
[  109.014176][ T6752] Quota error (device loop1): write_blk: dquota write failed
[  109.021642][ T6752] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  109.039383][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.057507][ T6753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.070226][ T4067] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  109.091649][ T6781] vlan2: entered allmulticast mode
[  109.098726][ T6752] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.635: Failed to acquire dquot type 0
[  109.110257][ T4067] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  109.127599][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'.
[  109.150687][ T6752] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.635: Freeing blocks not in datazone - block = 0, count = 4096
[  109.183538][ T6752] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.635: Invalid inode bitmap blk 0 in block_group 0
[  109.196292][ T4124] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1)
[  109.196512][ T6752] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  109.223764][ T6752] EXT4-fs (loop1): 1 orphan inode deleted
[  109.229673][   T29] audit: type=1326 audit(1753613256.751:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6793 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  109.229762][ T4124] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0
[  109.264969][ T6752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.278633][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.279216][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'.
[  109.305989][ T6752] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.635: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  109.332558][ T6794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.362281][ T6799] netlink: 'syz.0.638': attribute type 7 has an invalid length.
[  109.362383][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.434094][ T6812] netlink: 'syz.3.640': attribute type 21 has an invalid length.
[  109.442025][ T6812] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.587922][ T6822] loop5: detected capacity change from 0 to 512
[  109.872538][ T6825] loop2: detected capacity change from 0 to 512
[  109.879593][ T6825] ext3: Unknown parameter 'fowner>00000000000000000000'
[  109.895442][ T6831] loop3: detected capacity change from 0 to 1024
[  109.905604][ T6822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.920495][ T6828] loop1: detected capacity change from 0 to 512
[  109.946714][ T6831] EXT4-fs: Ignoring removed nobh option
[  109.952354][ T6831] EXT4-fs: inline encryption not supported
[  109.981821][ T6828] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  110.017922][ T6822] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.068387][ T6828] EXT4-fs (loop1): invalid journal inode
[  110.074468][ T6828] EXT4-fs (loop1): can't get journal size
[  110.084902][ T6828] EXT4-fs (loop1): 1 truncate cleaned up
[  110.092231][ T6828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.105463][ T6822] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  110.113010][ T6828] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.645: bg 0: block 255: padding at end of block bitmap is not set
[  110.121075][ T6822] EXT4-fs (loop5): Remounting filesystem read-only
[  110.135503][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.167652][ T4495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.177715][ T6828] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  110.196861][ T6831] netlink: 'syz.3.644': attribute type 1 has an invalid length.
[  110.211177][ T6831] bond6: entered promiscuous mode
[  110.229604][ T6888] loop0: detected capacity change from 0 to 1024
[  110.235874][ T6831] 8021q: adding VLAN 0 to HW filter on device bond6
[  110.238603][ T6888] EXT4-fs: Ignoring removed orlov option
[  110.248429][ T6888] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.260497][ T6888] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  110.273500][ T6831] 8021q: adding VLAN 0 to HW filter on device bond6
[  110.283062][ T6888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.300270][ T6831] bond6: (slave wireguard7): The slave device specified does not support setting the MAC address
[  110.310854][ T6831] bond6: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  110.330496][ T6831] bond6: (slave wireguard7): making interface the new active one
[  110.338416][ T6831] wireguard7: entered promiscuous mode
[  110.355082][ T6831] bond6: (slave wireguard7): Enslaving as an active interface with an up link
[  110.367708][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.648'.
[  110.398459][ T6902] loop2: detected capacity change from 0 to 2048
[  110.430726][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.467797][ T6911] loop5: detected capacity change from 0 to 164
[  110.479673][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'.
[  110.489606][ T6911] rock: directory entry would overflow storage
[  110.495835][ T6911] rock: sig=0x66, size=4, remaining=3
[  110.528016][ T6911] rock: directory entry would overflow storage
[  110.534258][ T6911] rock: sig=0x66, size=4, remaining=3
[  110.563296][ T6915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.585553][ T6911] rock: directory entry would overflow storage
[  110.591980][ T6911] rock: sig=0x66, size=4, remaining=3
[  110.600467][ T6923] netlink: 'syz.0.652': attribute type 7 has an invalid length.
[  110.634085][ T6911] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  110.670460][ T6935] loop1: detected capacity change from 0 to 512
[  110.682268][ T6934] loop3: detected capacity change from 0 to 2048
[  110.686012][ T6933] loop0: detected capacity change from 0 to 2048
[  110.691153][ T6935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.724769][ T6935] EXT4-fs (loop1): 1 truncate cleaned up
[  110.807650][ T6954] loop1: detected capacity change from 0 to 512
[  110.827026][ T6954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.883901][ T6954] EXT4-fs (loop1): 1 truncate cleaned up
[  111.149054][ T6980] loop0: detected capacity change from 0 to 512
[  111.189026][ T6980] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  111.255938][ T6984] loop1: detected capacity change from 0 to 512
[  111.262775][ T6984] ext3: Unknown parameter 'fowner>00000000000000000000'
[  111.351423][ T6980] EXT4-fs (loop0): invalid journal inode
[  111.418645][ T6980] EXT4-fs (loop0): can't get journal size
[  111.483360][ T6993] loop2: detected capacity change from 0 to 512
[  111.527125][ T6980] EXT4-fs (loop0): 1 truncate cleaned up
[  111.552090][ T6993] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  111.587685][ T6980] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.662: bg 0: block 255: padding at end of block bitmap is not set
[  111.642481][ T6993] EXT4-fs (loop2): invalid journal inode
[  111.691244][ T6993] EXT4-fs (loop2): can't get journal size
[  111.713328][ T6980] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  111.744115][ T6993] EXT4-fs (loop2): 1 truncate cleaned up
[  111.788626][ T6993] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.663: bg 0: block 255: padding at end of block bitmap is not set
[  111.816922][ T6993] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  111.932073][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.666'.
[  111.941808][ T7015] netlink: 'syz.5.665': attribute type 7 has an invalid length.
[  112.004869][ T7026] loop0: detected capacity change from 0 to 512
[  112.017526][ T7029] loop5: detected capacity change from 0 to 2048
[  112.029752][ T7026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  112.051480][ T7026] EXT4-fs (loop0): 1 truncate cleaned up
[  112.194513][ T7041] tmpfs: Bad value for 'mpol'
[  112.236297][   T29] kauditd_printk_skb: 135 callbacks suppressed
[  112.236312][   T29] audit: type=1326 audit(1753613259.751:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.267627][   T29] audit: type=1326 audit(1753613259.751:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.291099][   T29] audit: type=1326 audit(1753613259.751:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.314480][   T29] audit: type=1326 audit(1753613259.751:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.337833][   T29] audit: type=1326 audit(1753613259.751:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.361222][   T29] audit: type=1326 audit(1753613259.751:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.384714][   T29] audit: type=1326 audit(1753613259.751:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.408056][   T29] audit: type=1326 audit(1753613259.751:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.431366][   T29] audit: type=1326 audit(1753613259.751:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.454767][   T29] audit: type=1326 audit(1753613259.751:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f501ea4e9a9 code=0x7ffc0000
[  112.519789][ T7045] loop0: detected capacity change from 0 to 512
[  112.569140][ T7045] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  112.598312][ T7050] netlink: 'syz.2.672': attribute type 21 has an invalid length.
[  112.645944][ T7045] EXT4-fs (loop0): invalid journal inode
[  112.651807][ T7045] EXT4-fs (loop0): can't get journal size
[  112.701604][ T7045] EXT4-fs (loop0): 1 truncate cleaned up
[  112.751725][ T7045] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.671: bg 0: block 255: padding at end of block bitmap is not set
[  112.787075][ T7060] loop3: detected capacity change from 0 to 2048
[  112.806825][ T7045] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  112.857299][ T7068] tmpfs: Unknown parameter 'rootcontext½'
[  112.868407][ T7068] loop2: detected capacity change from 0 to 1024
[  113.001361][ T7068] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  113.041799][ T7077] Cannot find add_set index 0 as target
[  113.058747][ T7068] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.674: lblock 1 mapped to illegal pblock 1 (length 1)
[  113.131183][ T7068] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.674: Failed to acquire dquot type 0
[  113.143295][ T7068] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.674: Freeing blocks not in datazone - block = 0, count = 4096
[  113.158384][ T7068] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.674: Invalid inode bitmap blk 0 in block_group 0
[  113.171586][ T7068] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  113.181814][ T4081] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1)
[  113.198215][ T4081] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 0
[  113.354971][ T7068] EXT4-fs (loop2): 1 orphan inode deleted
[  113.368936][ T7068] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.674: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  113.484210][ T7087] loop1: detected capacity change from 0 to 512
[  113.547315][ T7087] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  113.642690][ T7087] EXT4-fs (loop1): invalid journal inode
[  113.691636][ T7087] EXT4-fs (loop1): can't get journal size
[  113.770650][ T7098] loop3: detected capacity change from 0 to 1024
[  113.787194][ T7087] EXT4-fs (loop1): 1 truncate cleaned up
[  113.829537][ T7087] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.678: bg 0: block 255: padding at end of block bitmap is not set
[  113.853073][ T7098] EXT4-fs: Ignoring removed orlov option
[  113.858865][ T7098] EXT4-fs: Ignoring removed mblk_io_submit option
[  113.932875][ T7087] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  113.946524][ T7098] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  114.010457][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'.
[  114.043618][ T7108] loop5: detected capacity change from 0 to 1024
[  114.059545][ T7108] EXT4-fs: Ignoring removed nobh option
[  114.065167][ T7108] EXT4-fs: inline encryption not supported
[  114.088524][ T7115] loop2: detected capacity change from 0 to 512
[  114.129073][ T7115] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  114.152856][ T7115] EXT4-fs (loop2): invalid journal inode
[  114.158999][ T7115] EXT4-fs (loop2): can't get journal size
[  114.159682][ T7108] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.681: Allocating blocks 385-513 which overlap fs metadata
[  114.179451][ T7127] loop3: detected capacity change from 0 to 1024
[  114.185455][ T7108] EXT4-fs (loop5): pa ffff888106dc0930: logic 16, phys. 129, len 24
[  114.190442][ T7115] EXT4-fs (loop2): 1 truncate cleaned up
[  114.193841][ T7108] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  114.202695][ T7127] EXT4-fs: Ignoring removed orlov option
[  114.215366][ T7127] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.222264][ T7115] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.679: bg 0: block 255: padding at end of block bitmap is not set
[  114.261584][ T7115] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  114.268093][ T7127] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  114.274755][ T7108] netlink: 'syz.5.681': attribute type 1 has an invalid length.
[  114.294781][ T7108] bond6: entered promiscuous mode
[  114.302883][ T7108] 8021q: adding VLAN 0 to HW filter on device bond6
[  114.357523][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'.
[  114.370079][ T7108] 8021q: adding VLAN 0 to HW filter on device bond6
[  114.377534][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.685'.
[  114.390293][ T7108] bond6: (slave wireguard5): The slave device specified does not support setting the MAC address
[  114.400908][ T7108] bond6: (slave wireguard5): Setting fail_over_mac to active for active-backup mode
[  114.430831][ T7186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.438233][ T7186] IPv6: NLM_F_CREATE should be set when creating new route
[  114.445469][ T7186] IPv6: NLM_F_CREATE should be set when creating new route
[  114.462273][ T7186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.480727][ T7108] bond6: (slave wireguard5): making interface the new active one
[  114.488578][ T7108] wireguard5: entered promiscuous mode
[  114.497931][ T7108] bond6: (slave wireguard5): Enslaving as an active interface with an up link
[  114.518069][ T7186] bond6: (slave wireguard6): The slave device specified does not support setting the MAC address
[  114.559971][ T7186] bond6: (slave wireguard6): Enslaving as a backup interface with an up link
[  114.633888][ T7199] loop3: detected capacity change from 0 to 512
[  114.679866][ T7199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  114.735308][ T7199] EXT4-fs (loop3): 1 truncate cleaned up
[  114.882614][ T7217] loop3: detected capacity change from 0 to 512
[  114.931280][ T7217] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.944890][ T7217] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  114.961717][ T7217] EXT4-fs (loop3): Remounting filesystem read-only
[  115.009184][ T7226] loop2: detected capacity change from 0 to 512
[  115.074304][ T7226] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.089261][ T7226] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  115.104971][ T7226] EXT4-fs (loop2): Remounting filesystem read-only
[  115.178000][ T7242] loop3: detected capacity change from 0 to 512
[  115.203831][ T7242] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  115.246051][ T7242] EXT4-fs (loop3): invalid journal inode
[  115.255915][ T7242] EXT4-fs (loop3): can't get journal size
[  115.289407][ T7260] loop5: detected capacity change from 0 to 1024
[  115.306380][ T7242] EXT4-fs (loop3): 1 truncate cleaned up
[  115.312580][ T7260] EXT4-fs: Ignoring removed nobh option
[  115.318343][ T7260] EXT4-fs: inline encryption not supported
[  115.344160][ T7264] loop2: detected capacity change from 0 to 512
[  115.350582][ T7242] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.694: bg 0: block 255: padding at end of block bitmap is not set
[  115.368391][ T7266] loop1: detected capacity change from 0 to 512
[  115.384215][ T7242] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  115.403485][ T7266] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.418428][ T7266] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  115.434604][ T7266] EXT4-fs (loop1): Remounting filesystem read-only
[  115.442853][ T7264] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.463155][ T7264] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  115.484337][ T7264] EXT4-fs (loop2): Remounting filesystem read-only
[  115.493246][ T7260] netlink: 'syz.5.695': attribute type 1 has an invalid length.
[  115.520117][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'.
[  115.528404][ T7260] bond7: entered promiscuous mode
[  115.534272][ T7260] 8021q: adding VLAN 0 to HW filter on device bond7
[  115.559195][ T7260] 8021q: adding VLAN 0 to HW filter on device bond7
[  115.574545][ T7260] bond7: (slave wireguard7): The slave device specified does not support setting the MAC address
[  115.585239][ T7260] bond7: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  115.598017][ T7260] bond7: (slave wireguard7): making interface the new active one
[  115.605961][ T7260] wireguard7: entered promiscuous mode
[  115.613640][ T7260] bond7: (slave wireguard7): Enslaving as an active interface with an up link
[  115.622638][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.630260][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.641288][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.648850][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.700083][ T7341] loop0: detected capacity change from 0 to 1024
[  115.728253][ T7341] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.866707][ T7361] netlink: 'syz.5.702': attribute type 21 has an invalid length.
[  115.971538][ T7366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.073516][ T7376] loop3: detected capacity change from 0 to 2048
[  116.418625][ T7384] loop2: detected capacity change from 0 to 512
[  116.431433][ T7384] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.469303][ T7384] EXT4-fs (loop2): 1 truncate cleaned up
[  116.491223][ T4067] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  116.515595][ T4067] EXT4-fs (loop0): Remounting filesystem read-only
[  116.541555][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.708'.
[  116.574510][ T4101] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30
[  116.645803][ T7402] tmpfs: Bad value for 'mpol'
[  116.649036][ T7393] vlan2: entered allmulticast mode
[  116.678576][ T7411] loop5: detected capacity change from 0 to 512
[  116.691105][ T7411] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  116.714109][ T7415] loop2: detected capacity change from 0 to 512
[  116.722281][ T7411] EXT4-fs (loop5): 1 truncate cleaned up
[  116.738647][ T7415] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.750834][ T7415] Cannot find add_set index 0 as target
[  116.768313][ T7424] tmpfs: Unknown parameter 'rootcontext½'
[  116.779640][ T7415] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  116.800801][ T7424] loop0: detected capacity change from 0 to 1024
[  116.810929][ T7424] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  116.821852][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  116.849400][ T7424] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.713: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.877383][ T7424] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.713: Failed to acquire dquot type 0
[  116.915561][ T7424] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.713: Freeing blocks not in datazone - block = 0, count = 4096
[  116.934477][ T7424] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.713: Invalid inode bitmap blk 0 in block_group 0
[  116.948868][   T31] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.982273][ T7424] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  116.991048][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0
[  117.018543][ T7424] EXT4-fs (loop0): 1 orphan inode deleted
[  117.039116][ T7424] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.713: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  117.078545][ T7451] capability: warning: `syz.5.718' uses deprecated v2 capabilities in a way that may be insecure
[  117.161103][ T7461] loop5: detected capacity change from 0 to 512
[  117.172311][ T7461] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  117.182441][ T7461] EXT4-fs (loop5): invalid journal inode
[  117.188184][ T7461] EXT4-fs (loop5): can't get journal size
[  117.232441][ T7457] netlink: 'syz.0.719': attribute type 7 has an invalid length.
[  117.253144][ T7464] loop3: detected capacity change from 0 to 512
[  117.260020][ T7464] ext3: Unknown parameter 'fowner>00000000000000000000'
[  117.361792][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  117.361808][   T29] audit: type=1400 audit(1753613264.891:1760): avc:  denied  { create } for  pid=7465 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  117.423562][ T7461] EXT4-fs (loop5): 1 truncate cleaned up
[  117.492543][ T7461] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.720: bg 0: block 255: padding at end of block bitmap is not set
[  117.547270][   T29] audit: type=1326 audit(1753613265.021:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.570840][   T29] audit: type=1326 audit(1753613265.021:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.594243][   T29] audit: type=1326 audit(1753613265.021:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.617712][   T29] audit: type=1326 audit(1753613265.021:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.641275][   T29] audit: type=1326 audit(1753613265.021:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.664636][   T29] audit: type=1326 audit(1753613265.041:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.687993][   T29] audit: type=1326 audit(1753613265.041:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.711411][   T29] audit: type=1326 audit(1753613265.041:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.734898][   T29] audit: type=1326 audit(1753613265.051:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f25290ee9a9 code=0x7ffc0000
[  117.985975][ T7461] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  118.076779][ T7490] loop0: detected capacity change from 0 to 1024
[  118.098735][ T7490] EXT4-fs: Ignoring removed orlov option
[  118.104507][ T7490] EXT4-fs: Ignoring removed mblk_io_submit option
[  118.116375][ T7490] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  118.132270][ T7493] loop3: detected capacity change from 0 to 512
[  118.179391][ T7501] loop2: detected capacity change from 0 to 512
[  118.193991][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.724'.
[  118.203793][ T7493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  118.249685][ T7501] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.250588][ T7501] Cannot find add_set index 0 as target
[  118.267633][ T7501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters
[  118.291049][ T7501] EXT4-fs (loop2): Remounting filesystem read-only
[  118.300074][ T7493] EXT4-fs (loop3): 1 truncate cleaned up
[  118.338158][ T7508] loop5: detected capacity change from 0 to 2048
[  118.446397][ T7541] loop2: detected capacity change from 0 to 512
[  118.454470][ T7541] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  118.477575][ T7541] EXT4-fs (loop2): 1 truncate cleaned up
[  118.550013][ T7546] loop1: detected capacity change from 0 to 512
[  118.633576][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.732: iget: bad i_size value: 38620345925642
[  118.669688][ T7560] loop2: detected capacity change from 0 to 2048
[  118.682356][ T7563] loop3: detected capacity change from 0 to 1024
[  118.684812][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.732: couldn't read orphan inode 15 (err -117)
[  118.734173][ T7563] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.824617][   T31] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  118.865949][   T31] EXT4-fs (loop3): Remounting filesystem read-only
[  118.882782][ T4067] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  118.938232][ T7585] ==================================================================
[  118.946386][ T7585] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update
[  118.954333][ T7585] 
[  118.956671][ T7585] read to 0xffff888102460480 of 4 bytes by task 3521 on cpu 0:
[  118.964245][ T7585]  bdev_statx+0x295/0x2d0
[  118.968641][ T7585]  vfs_getattr_nosec+0x1b6/0x1e0
[  118.973606][ T7585]  vfs_statx+0x113/0x390
[  118.977884][ T7585]  vfs_fstatat+0x115/0x170
[  118.982414][ T7585]  __se_sys_newfstatat+0x55/0x260
[  118.987465][ T7585]  __x64_sys_newfstatat+0x55/0x70
[  118.992525][ T7585]  x64_sys_call+0x2c22/0x2fb0
[  118.997234][ T7585]  do_syscall_64+0xd2/0x200
[  119.001761][ T7585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.007679][ T7585] 
[  119.010018][ T7585] write to 0xffff888102460440 of 184 bytes by task 7585 on cpu 1:
[  119.017835][ T7585]  queue_limits_commit_update+0x4c/0x110
[  119.023501][ T7585]  loop_configure+0x79c/0xa50
[  119.028221][ T7585]  lo_ioctl+0x559/0x15d0
[  119.032484][ T7585]  blkdev_ioctl+0x34f/0x440
[  119.037006][ T7585]  __se_sys_ioctl+0xce/0x140
[  119.041633][ T7585]  __x64_sys_ioctl+0x43/0x50
[  119.046249][ T7585]  x64_sys_call+0x19a8/0x2fb0
[  119.050948][ T7585]  do_syscall_64+0xd2/0x200
[  119.055478][ T7585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.061410][ T7585] 
[  119.063736][ T7585] Reported by Kernel Concurrency Sanitizer on:
[  119.069902][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.3.738 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[  119.082256][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.092325][ T7585] ==================================================================
[  119.168129][ T7585] loop3: detected capacity change from 0 to 1024
[  119.190020][ T7585] EXT4-fs: Ignoring removed orlov option
[  119.195809][ T7585] EXT4-fs: Ignoring removed mblk_io_submit option
[  119.204397][ T7585] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  119.221138][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'.